Alienvault via Parse

Alienvault: Browse Adversaries

Retrieve a paginated list of known threat actors/adversaries with descriptions and metadata. Each adversary includes a name, description, metadata (country, synonyms, references), and UUID. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Get Adversary Details

Retrieve details for a specific adversary by name. Performs case-insensitive matching against the full adversary list. Returns description, metadata (country, synonyms, references, capabilities, victimology), and UUID. Use browse_adversaries results[*].value to find valid names. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Get Indicator Details

Retrieve detailed threat intelligence for a specific indicator (IP, domain, URL, file hash, CVE). Returns reputation data, geolocation, associated pulses, validation status, and section-specific details. The 'general' section includes all core fields; other sections provide specialized views. Not all section/type combinations are available upstream. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Get Pulse Details

Retrieve full metadata for a specific threat intelligence pulse including tags, malware families, MITRE ATT&CK technique IDs, targeted countries, industries, and indicator counts. Returns a single pulse object. Use the pulse_id from search_pulses results. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Get Pulse Indicators

Retrieve indicators of compromise (IOCs) associated with a pulse. Returns a paginated list of indicators with type, value, creation date, and activity status. Each indicator includes its type (IPv4, domain, FileHash-SHA256, CVE, URL, etc.) and the raw indicator value. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Get Recent Alerts

Retrieve the most recently modified threat intelligence pulses/alerts. Returns the same data shape as search_pulses, sorted by most recent modification. Equivalent to search_pulses with no query and sort=-modified. The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse

Alienvault: Search Pulses

Full-text search over threat intelligence pulses by keyword, tag, or metadata. Returns paginated results sorted by modification date by default. Omitting the query returns all pulses. Each pulse summary includes indicator counts and author info but not the full indicator list (use get_pulse_indicators for that). The AlienVault OTX API provides access to global threat intelligence, including indicators of compromise (IOCs), threat pulses, and adversary profiles. Data is sourced from the Open Threat Exchange community. Fulfilled by Parse from alienvault.com.

Alienvault via Parse