/
Infoblox Platform

Infoblox Platform

Provides a list of reported threats associated with the indicator from the Infoblox Portal.

Ā  Ā  Ā  Ā 

Data Structure:

  {
Ā  ā€œdropped_countā€: integer,
Ā  ā€œmax_request_countā€: integer,
Ā  ā€œrecord_countā€: integer,
Ā  ā€œthreatā€: [
Ā  Ā  Ā {
Ā  Ā  Ā  ā€œbatch_idā€: string,
Ā  Ā  Ā  ā€œclassā€: string,
Ā  Ā  Ā  ā€œdetectedā€: string,
Ā  Ā  Ā  ā€œdomainā€: string,
Ā  Ā  Ā  ā€œhostā€: string,
Ā  Ā  Ā  ā€œidā€: string,
Ā  Ā  Ā  ā€œimportedā€: string,
Ā  Ā  Ā  ā€œipā€: string,
Ā  Ā  Ā  ā€œoriginā€: string,
Ā  Ā  Ā  ā€œprofileā€: string,
Ā  Ā  Ā  ā€œpropertyā€: string,
Ā  Ā  Ā  ā€œreceivedā€: string,
Ā  Ā  Ā  ā€œtargetā€: string,
Ā  Ā  Ā  ā€œthreat_levelā€: integer,
Ā  Ā  Ā  ā€œtldā€: string,
Ā  Ā  Ā  ā€œtlpā€: string,
Ā  Ā  Ā  ā€œtypeā€: string,
Ā  Ā  Ā  ā€œupā€: string,
Ā  Ā  Ā  ā€œurlā€: string,
Ā  Ā  Ā  ā€œextendedā€: {
Ā  Ā  Ā  Ā  ā€œurl_hashā€: string
Ā  Ā  Ā  Ā  }
Ā  Ā  Ā  },
       ā€¦ 
     ]
  }

Ā  Ā  Ā  Ā  Ā  Ā  Ā  Ā 

Example:

When given an indicator of ā€œmoiparks.inā€, ATP will return:

  {
    "dropped_count": 0,
"max_requested_count": "50",
"record_count": 6,
"threat": [
{
"batch_id": "c60fb776-a5f8-11e6-898a-95226fae6af8",
"class": "Policy",
"detected": "2016-11-03T22:17:26.000Z",
"dga": "false",
"domain": "moiparks.in",
"expiration": "2016-12-03T22:17:26.000Z",
"host": "moiparks.in",
"id": "c6129e0b-a5f8-11e6-898a-95226fae6af8",
"imported": "2016-11-08T21:17:37.479Z",
"ip": "",
"origin": "",
"profile": "AIS-FEDGOV",
"property": "Policy_NCCICwatchlist",
"received": "2016-11-08T21:17:37.479Z",
"target": "",
"threat_level": 100, "tld": "in",
"tlp": "",
"type": "HOST",
"up": "true",
"url": ""
},
ā€¦
]
}

Related content