quaxar-threat-actor-indicators
List threat actor indicators from S2W Quaxar service.
Syntax
quaxar-threat-actor-indicators [profile=PROFILE] id=ID [detail=DETAIL]
Options
- profile=PROFILE
- Optional. QUAXAR connect profile code
- id=ID
- Required. Threat actor group ID
- detail=DETAIL
- Optional. Show threat actor name and last_updated (t/f, default f)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Profile name of QUAXAR |
| name | String | Name | Threat actor group name |
| last_updated | Date | Last updated | Last updated time |
| type | String | Type | Indicator type |
| value | String | Value | Indicator value |