ahnlab-tip-actor-files
Fetch files related to the specified threat actor from the AhnLab TIP service.
ahnlab-tip-actor-files [profile=PROFILE] actor-id=ACTOR-ID
- profile=PROFILE
- Optional. Ahnlab TIP connect profile code
- actor-id=ACTOR-ID
- Required. Threat actor ID (positive integer). e.g. 25701
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | AhnLab TIP connect profile code. e.g. atip |
| file_name | String | File name | File name |
| file_type | String | File type | File type. e.g. exe, dll |
| signature | String | Signature | Malware name. e.g. Trojan/Win.Generic.C5503103 |
| verdict | String | Verdict | Detection verdict: malicious, benign, unknown |
| report_count | Integer | Report count | Report count. e.g. 22 |
| md5 | String | MD5 | MD5 hash. e.g. 0d68a310f4265821900249bec89364c2 |
| sha1 | String | SHA1 | SHA1 hash. e.g. 2981343bfd2db38e236c0b70c2a6cd924c49b0ab |
| sha256 | String | SHA256 | SHA256 hash. e.g. 6316417fcd979c39a4da672ba3521f62081ff4dfebb868ef65a1f2dff9a738ea |
| submitted | Date | Submitted | Collection time |
| detected | Date | Detected | Detection time |