Integration Details

ThreatQuotient provides the following details for this integration:

Current Integration Version	1.0.0
Compatible with ThreatQ Versions	>= 4.34.0
Support Tier	ThreatQ Supported

Introduction

The MalwareBazaar Operation for ThreatQ enables a user to query MalwareBazaar for any threat context for a given file hash.

The operation provides the following action:

• Query - queries MalwareBazaar for Threat Context.

The operation is compatible with the following indicator types:

• MD5
• SHA-1
• SHA-256

Installation

Configuration

ThreatQuotient does not issue API keys for third-party vendors. Contact the specific vendor to obtain API keys and other integration-related credentials.

To configure the integration:

1. Navigate to your integrations management page in ThreatQ.
2. Select the Operation option from the Type dropdown (optional).
3. Click on the integration entry to open its details page.
4. Review any additional settings, make any changes if needed, and click on Save.
5. Click on the toggle switch, located above the Additional Information section, to enable it.

Actions

The operation provides the following action:

Action	Description	Object Type	Object Subtype
Query	Queries MalwareBazaar for Threat Context.	Indicator	MD5, SHA-1, SHA-256

Example 1 Response

Example 2 Response

Example 3 Response

Example 4 Response

Change Log

• Version 1.0.0
  • Initial release