sonar-ioc-update-ip
Updates the reputation and risk of the given IP indicator. Nothing is changed unless reputation or risk is specified.
sonar-ioc-update-ip resource=VALUE [reputation=VALUE] [risk=VALUE]
- resource=VALUE
- Required. IP indicator value to update
- reputation=VALUE
- Optional. One of UNKNOWN, BENIGN, SUSPICIOUS, MALICIOUS
- risk=VALUE
- Optional. One of BENIGN, LOW, MEDIUM, HIGH
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| ip | String | Indicator Value | Updated indicator value |
| reputation | String | Reputation | Reputation applied, in lowercase. Absent if reputation was not specified. |
| risk | String | Risk | Risk applied, in lowercase. Absent if risk was not specified. |