genian-edr-malicious-ips
Lists the custom Malicious IP IOCs, newest first.
genian-edr-malicious-ips [profile=VALUE] [keyword=VALUE]
- profile=VALUE
- Optional. Genian EDR connect profile name. Every Genian EDR profile is queried when omitted.
- keyword=VALUE
- Optional. Quick search text, matched the way the IOC list search box matches it
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| ip | String | IP | e.g. 192.0.2.77. 1.2.3.4, a network 1.2.3.0/24 or a range 1.2.3.4-1.2.3.9. |
| response | String | Response | e.g. DetectAndResponse. Response code. |
| msg | String | Message | Detection message |
| tag | String | Tag | e.g. campaign-x. Comma separated tags. |
| description | String | Description | e.g. Seen in incident 2026-11. Description. |
| user | String | User | e.g. admin01. Console account that registered it. |
| created | Date | Created | e.g. 2026-11-07 00:14:20. When it was registered. |
| _time | Date | Time | e.g. 2026-11-07 00:14:20. Representative time of the row. |