Current ThreatQ Version Filter
OpenIOC Signature Exports
The web format of this guide reflects the most current release. Guides for older iterations are available in PDF format.
Export Details
ThreatQuotient provides the following details for this export:
Current Guide Version | 1.0.0 |
Support Tier | ThreatQ Supported |
Introduction
ThreatQuotient makes it easy for customers to export OpenIOC signatures for use with an external threat detection system.
Creating the Export
The following section will detail how to create exports.
See the Managing Exports topic for more details on ThreatQ exports.
- Select the Settings icon > Exports.
The Exports page appears with a table listing all exports in alphabetical order.
- Click Add New Export
The Connection Settings dialog box appears.
- Enter an Export Name.
- Click Next Step.
The Output Format dialog box appears.
- Provide the following information:
Field Value Which type of information
would you like to export?Signatures Output Type text/csv Special Parameters signature.status=Active&signature.deleted=N&signature.type=OpenIOCOutput Template {foreach $data as $signature}
"{$signature.name|replace:'"':'\"'}","{$signature.value|replace:'"':'\"'}"
{/foreach} -
Click on Save Settings and enable the export via the On/Off toggle switch.
Change Log
- Version 1.0.0
- Initial release
PDF Guides
Document | ThreatQ Version |
---|---|
OpenIOC Signature Exports Guide v1.0.0 | N/A |