Jul 2, 2024
1.2.3
ThreatQ versions >= 5.11.0
Hybrid Analysis CDF
Overview
The Hybrid Analysis CDF for ThreatQ allows a ThreatQ user to ingest sample reports from the public feed, as well as automatically ingest reports for samples submitted through ThreatQ, via the Hybrid Analysis Operation.
The CDF provides the following feeds:
- Hybrid Analysis Public Feed - enables the ingestion of public reports from Hybrid Analysis using their public feed.
- Hybrid Analysis Submissions Feed - enables the ingestion of reports from samples submitted through the Hybrid Analysis Operation from the ThreatQ platform.
- Hybrid Analysis Quick Scans - ingests quick scan results and sandbox reports for samples or URLs submitted by the Hybrid Analysis Operation.
The CDF ingests the following system objects:
- Attack Patterns
- Attack Pattern Attributes
- Indicators
- Indicator Attributes