rf-risk-url-indicators
Fetch URL risk indicators from Recorded Future.
Syntax
rf-risk-url-indicators [profile=PROFILE] [list=LIST]
- profile=PROFILE
- Optional. Recorded Future connect profile code
- list=LIST
- Optional. Risk list type (default, large, malwareSiteDetected, phishingSiteDetected)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Profile | Recorded Future connect profile code |
| url | String | URL | Risky URL |
| risk_score | Integer | Risk score | Risk score (0-99) |
| risk_string | String | Risk string | Triggered rules / Total rules |
| evidence_details | List | Evidence details | List of evidence details |