genian-edr-add-malicious-ip-batch
Registers a custom Malicious IP IOC for every input row, a hundred per console call. This command changes the console, so profile is required.
genian-edr-add-malicious-ip-batch profile=VALUE [field=VALUE] [response=VALUE] [msg=VALUE] [tag=VALUE] [description=VALUE]
- profile=VALUE
- Required. Genian EDR connect profile name. Required: a change is made on exactly one console.
- field=VALUE
- Optional. Input field holding the ip of each row. Defaults to ip.
- response=VALUE
- Optional. Response code. Use a value existing entries (the list command) carry; the codes are defined on the console. Used when an input row has no field of the same name.
- msg=VALUE
- Optional. Detection message Used when an input row has no field of the same name.
- tag=VALUE
- Optional. Comma separated tags Used when an input row has no field of the same name.
- description=VALUE
- Optional. Description Used when an input row has no field of the same name.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _result | String | Result | e.g. success. success, fail or skip (empty or repeated value). |
| _error | String | Error | e.g. invalid ip: 192.0.2.1~192.0.2.9. Why the row failed or was skipped. |