RST Noise Control Action
Overview
The RST Noise Control Action integration sends a collection of indicators to RST to automatically check if the indicators are likely to create noise when used for real-time detection or may cause problems when applied for prevention.
The integration provides the following action:
- RST Noise Control - retrieves the benign state of an indicator from RST Cloud and ingests it into the ThreatQ platform.
The action is compatible with, enriches, and returns the following indicator types:
- FQDN
- IP Address
- URL
- MD5
- SHA-1
- SHA-256
Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.