threatintel.threatstreamField | Type | Source field name | Extra fields |
---|
eventdate | timestamp
| | | type | str
| vtype | | asn | str
| | | classification | str
| | | confidence | str
| | | country | str
| | | date_first | str
| | | date_last | str
| | | detail | str
| | | detail2 | str
| | | domain | str
| | | email | str
| | | id | str
| | | import_session_id | str
| | | itype | str
| | | lat | str
| | | lon | str
| | | maltype | str
| | | md5 | str
| | | media | str
| | | media_type | str
| | | org | str
| | | resource_uri | str
| | | severity | str
| | | source | str
| | | source_feed_id | str
| | | srcip | str
| | | state | str
| | | url | str
| | | update_id | str
| | | hostchain | str
| | ✓ | tag | str
| | ✓ | rawMessage | str
| | ✓ |
threatintel.threatstream.domainField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | domain | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.emailField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.ioccountbyhourField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.ipField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.itypesField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.md5Field | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.severitiesField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.stringField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
threatintel.threatstream.urlField | Type | Extra fields |
---|
eventdate | timestamp
| | asn | str
| | classification | str
| | confidence | str
| | country | str
| | date_first | str
| | date_last | str
| | detail | str
| | detail2 | str
| | email | str
| | id | str
| | import_session_id | str
| | itype | str
| | lat | str
| | lon | str
| | maltype | str
| | md5 | str
| | media | str
| | media_type | str
| | org | str
| | resource_uri | str
| | severity | str
| | source | str
| | source_feed_id | str
| | srcip | str
| | state | str
| | url | str
| | update_id | str
| | hostchain | str
| ✓ | tag | str
| ✓ | rawMessage | str
| ✓ |
|