The Infoblox Threat Defense Action allows users to upload or delete indicators to/from a custom list on the Infoblox Threat Defense Cloud platform.

The integration provides the following action:

• Infoblox Threat Defense Action - uploads or deletes indicators from a Threat Defense custom list. 

The integration is compatible with the following indicator types:

• CIDR Block
• FQDN
• Indicators
• IP Address

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.