Skip to main content

Get Threat IOC Feed

Retrieves details of a specific Threat IOC (Indicator of Compromise) feed.

Parameters​

ParameterDescription
IOC FeedThe IOC to fetch. Select the feed's name or manually type its name/ID.

Example Output​

{
    "uid": "f16bf59e-321d-422a-b9c4-99ae07a67804",
    "name": "example-updated",
    "type": "threat-ioc-feed",
    "domain": {
        "uid": "41e821a0-3720-11e3-aa6e-0800200c9fde",
        "name": "SMC User",
        "domain-type": "domain"
    },
    "v": "domain",
    "feed-type": "domain",
    "feed-url": "https://example.com/feed.xml",
    "use-gateway-proxy": true,
    "use-custom-feed-settings": false,
    "action": "Prevent",
    "enabled": true,
    "custom-headers": [],
    "comments": "",
    "color": "black",
    "icon": "ThreatPrevention/FileGlobe",
    "tags": [],
    "meta-info": {
        "lock": "unlocked",
        "validation-state": "ok",
        "last-modify-time": {
            "posix": 1687873017021,
            "iso-8601": "2023-06-27T16:36+0300"
        },
        "last-modifier": "admin",
        "creation-time": {
            "posix": 1687872974795,
            "iso-8601": "2023-06-27T16:36+0300"
        },
        "creator": "admin"
    },
    "read-only": false,
    "available-actions": {
        "edit": "true",
        "delete": "true",
        "clone": "true"
    }
}

Workflow Library Example​

Get Threat Ioc Feed with Check Point Management and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop