#Alienvault otx api group update#

Every object in the list must contain these three fields. Indicators (list of objects) List of objects (dicts). TLP (string) One of: 'white', 'green', 'amber', 'red'. Public (boolean, required) Public implies other users can see / subscribe to your pulse. Name (string, required) name for new pulseĭescription (string) a brief description of the pulse, the threat it addresses. ( modified_since, limit, page, callback ) 4( ipv4, section, callback ) Ĭallback: function (error, response) required Refer to API Docs for parameter options and response examples. Require 'otx-node-sdk/index.js' in your fileĪll functions require a callback.Register at and obtain your DirectConnect OTX Key found on.You can integrate community-generated OTX threat data directly into your AlienVault and third-party security products, so that your threat detection. In OTX, anyone in the security community can contribute, discuss, research, validate, and share threat data. Until then follow the instructions below: OTX changed the way the intelligence community creates and consumes threat data. The DirectConnect API provides access to all Pulses that you have subscribed to in Open Threat Exchange ( ). OTX DirectConnect provides a mechanism to automatically pull indicators of compromise from the Open Threat Exchange portal into your environment. The FortiSOAR server should have outbound connectivity to port 443 on the AlienVault-OTX server. By using Direct Connect, the indicators contained within the pulses you have subscribed to can be downloaded and made locally available for other applications such as Intrusion Detection Systems, Firewalls, and other security-focused applications. You must have the URL of the AlienVault-OTX server to which you will connect and perform the automated operations you will also need the API key to access that server.

#Alienvault otx api group update#

OTX Direct Connect agents provide a way to automatically update your security infrastructure with pulses you have subscribed to from with Open Threat Exchange. Open Threat Exchange is an open community that allows participants to learn about the latest threats, research indicators of compromise observed in their environments, share threats they have identified, and automatically update their security infrastructure with the latest indicators to defend their environment.