The Secureworks Action submits data collections containing IOCs to Secureworks’ API.

The integration provides the following action:

• Secureworks - Upsert Indicators - submits a selected data collection (IOCs) to Secureworks.

The action is compatible with the following indicator types:

• IP Address
• IPv6 Address
• URL
• FQDN
• MD5
• SHA-1
• SHA-256

This action does not ingest any data back into the ThreatQ platform.

Note:  This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.