Feed Me! Cisco AMP ThreatGrid Intelligence Feeds
Tags
| attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Malware - T1587.001 Malware - T1588.001 |
Common Information
| Type | Value |
|---|---|
| UUID | fe330b24-445d-42c6-8fd5-621e463cfbba |
| Fingerprint | 775c63271ce6862d |
| Analysis status | DONE |
| Considered CTI value | 1 |
| Text language | |
| Published | April 4, 2017, 8:14 a.m. |
| Added to db | Jan. 18, 2023, 9:22 p.m. |
| Last updated | Nov. 17, 2024, 5:57 p.m. |
| Headline | NetWitness Community |
| Title | Feed Me! Cisco AMP ThreatGrid Intelligence Feeds |
| Detected Hints/Tags/Attributes | 33/1/35 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | panacea.threatgrid.com |
|
| Details | Domain | 20 | alias.host |
|
| Details | Domain | 1 | threat.cat |
|
| Details | Domain | 1 | tg.date |
|
| Details | File | 1 | banking-dns.csv |
|
| Details | File | 1 | dll-hijacking-dns.csv |
|
| Details | File | 1 | doc-net-com-dns.csv |
|
| Details | File | 1 | downloaded-pe-dns.csv |
|
| Details | File | 1 | dynamic-dns.csv |
|
| Details | File | 1 | irc-dns.csv |
|
| Details | File | 1 | modified-hosts-dns.csv |
|
| Details | File | 1 | parked-dns.csv |
|
| Details | File | 1 | public-ip-check-dns.csv |
|
| Details | File | 1 | ransomware-dns.csv |
|
| Details | File | 1 | rat-dns.csv |
|
| Details | File | 1 | sinkholed-ip-dns.csv |
|
| Details | File | 1 | stolen-cert-dns.csv |
|
| Details | File | 1 | tg.dat |
|
| Details | File | 1 | tg.md5 |
|
| Details | File | 10 | index-concentrator-custom.xml |
|
| Details | Threat Actor Identifier - APT | 297 | APT27 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/feed_name.format?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/banking-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/dll-hijacking-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/doc-net-com-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/downloaded-pe-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/dynamic-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/irc-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/modified-hosts-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/parked-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/public-ip-check-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/ransomware-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/rat-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/sinkholed-ip-dns.csv?api_key=1234567890 |
|
| Details | Url | 1 | https://panacea.threatgrid.com/api/v3/feeds/stolen-cert-dns.csv?api_key=1234567890 |