quaxar-indicator-reports
List indicator reports from S2W Quaxar service.
Syntax
quaxar-indicator-reports [profile=PROFILE] [subtype=SUBTYPE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [risk-score=RISK-SCORE] [badges=BADGES] [pretty=PRETTY]
Options
- profile=PROFILE
- Optional. QUAXAR connect profile code
- subtype=SUBTYPE
- Optional. Report subtype. Available subtypes are ASM, CRYPTO, DDW, DRP, MAL, TA, VULN, NEWS, IR.
- duration=NUM{mon|w|d|h|m|s}
- Optional. Scan only recent data. Use s(second), m(minute), h(hour), d(day), mon(month) time unit.
- from=yyyyMMddHHmmss
- Optional. Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- Optional. End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- risk-score=RISK-SCORE
- Optional. Risk score filter (1-3).
- badges=BADGES
- Optional. Badge filter (Private, Public, RFI).
- pretty=PRETTY
- Optional. Set t to enable pretty print with line breaks (default: f).
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Profile name of QUAXAR |
| id | String | ID | Report ID |
| type | String | Type | Report type |
| subtypes | String | Subtypes | Newline-separated subtypes |
| title | String | Title | Report title |
| body | String | Body | Report body |
| risk_score | Integer | Risk score | Risk score (1-3) |
| published | Date | Published | Published date |
| tags | String | Tags | Newline-separated tag names |
| indicators | String | Indicators | Newline-separated indicator names |
| reference | String | Reference | Reference URL |
| doc_link | String | Doc link | Document link |