OBJECT

IocFeedEntry

Description

Information about the IOC.

link GraphQL Schema definition

  • type IocFeedEntry {
  • # IOC author.
  • author: String!
  • # Only set if the IOC is deactivated by a user.
  • disabledInfo: DisabledInfo
  • # Hash details if the IOC type is hash.
  • hashInfo: HashInfo
  • # Unique identifier of the intel.
  • intelId: String!
  • # Status of the feed entry.
  • iocStatus: FeedEntryStatus!
  • # Type of the IOC.
  • iocType: ThreatFeedType!
  • # Last updated time of the IOC from the provider.
  • lastUpdatedTime: DateTime
  • # Provider specific info.
  • providerInfo: ProviderInfo
  • # ID of the IOC from the provider.
  • providerIocId: String!
  • # ID of the malware from the provider.
  • providerMalwareId: String!
  • # The Threat Family associated with the IOC.
  • threatFamily: String!
  • # YARA rule details if the IOC type is YARA.
  • yaraInfo: YaraInfo
  • }