The OpenIOC File Exporter connector for ThreatQ enables you to export ThreatQ data collections in OpenIOC 1.0 and 1.1 formats.  Exported files are saved to a user-specified directory on your ThreatQ instance.

The custom connector supports the following IOCs:

OpenIOC 1.0

• IP Address
• MD5
• SHA-1
• SHA-256
• Email Address
• URL
• File Path
• Registry Key

OpenIOC 1.1

• IPv4 Addresses
• MD5
• SHA-1
• SHA-256
• Email Address
• FQDN
• URL
• File Path
• Registry Key