quaxar-threat-actor-indicators-batch
Batch list threat actor indicators from S2W Quaxar service.
Syntax
quaxar-threat-actor-indicators-batch profile=PROFILE [detail=DETAIL]
Options
- profile=PROFILE
- Required. QUAXAR connect profile code
- detail=DETAIL
- Optional. Show threat actor name and last_updated (t/f, default f)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Profile name of QUAXAR |
| name | String | Name | Threat actor group name |
| last_updated | Date | Last updated | Last updated time |
| type | String | Type | Indicator type |
| value | String | Value | Indicator value |