Current ThreatQ Version Filter
 

OpenIOC Signature Exports

The web format of this guide reflects the most current release.  Guides for older iterations are available in PDF format.  

Export Details

ThreatQuotient provides the following details for this export:

Introduction

ThreatQuotient makes it easy for customers to export OpenIOC signatures for use with an external threat detection system.

Creating the Export

The following section will detail how to create exports.

See the Managing Exports topic for more details on ThreatQ exports.  

  1. Select the Settings icon > Exports.

    The Exports page appears with a table listing all exports in alphabetical order.

  2. Click Add New Export

    The Connection Settings dialog box appears.

  3. Enter an Export Name.
  4. Click Next Step.

    The Output Format dialog box appears.

  5. Provide the following information:
    Field Value
    Which type of information
    would you like to export?
    Signatures
    Output Type text/csv
    Special Parameters
    signature.status=Active&signature.deleted=N&signature.type=OpenIOC
    Output Template
    {foreach $data as $signature}

    "{$signature.name|replace:'"':'\"'}","{$signature.value|replace:'"':'\"'}"

    {/foreach}
  6. Click on Save Settings and enable the export via the On/Off toggle switch.

Change Log

  • Version 1.0.0
    • Initial release

PDF Guides

Document ThreatQ Version
OpenIOC Signature Exports Guide v1.0.0 N/A