genian-edr-add-malicious-ip
Registers one custom Malicious IP IOC. This command changes the console, so profile is required.
genian-edr-add-malicious-ip profile=VALUE ip=VALUE [response=VALUE] [msg=VALUE] [tag=VALUE] [description=VALUE]
- profile=VALUE
- Required. Genian EDR connect profile name. Required: a change is made on exactly one console.
- ip=VALUE
- Required. A single address 1.2.3.4, a network 1.2.3.0/24 (or 1.2.3.0/255.255.255.0) or a range with a hyphen 1.2.3.4-1.2.3.9
- response=VALUE
- Optional. Response code. Use a value existing entries (the list command) carry; the codes are defined on the console.
- msg=VALUE
- Optional. Detection message
- tag=VALUE
- Optional. Comma separated tags
- description=VALUE
- Optional. Description
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| ip | String | IP | e.g. 192.0.2.77. 1.2.3.4, a network 1.2.3.0/24 or a range 1.2.3.4-1.2.3.9. |
| code | Integer | Code | e.g. 200. Result code the console answered. |
| msg | String | Message | e.g. 생성에 성공했습니다. Message the console answered. |
| details | Map | Details | e.g. {total=1, success_count=1, failed_ips=[], duplicated_ips=[], invalid_ips=[]}. Counts and the entries that failed, were duplicated or invalid. |