asp-threat-intelligence

asp-threat-intelligence queries ASP threat intelligence. Use it to retrieve IOC reputation, risk levels, tags, attack techniques, and malicious context.

Invocation

/asp-threat-intelligence

The agent queries threat intelligence through asp ti query ... --output json.

If you need to select a source explicitly, use the Provider name, such as OpenCTI or AlienVaultOTX.

Common Examples

/asp-threat-intelligence query threat intelligence for 1.2.3.4

/asp-threat-intelligence check whether this domain has malicious history

/asp-threat-intelligence query this IOC and format the result so it can be saved as an enrichment

Related CLI command:

asp ti query 1.2.3.4 --artifact-type "IP Address" --output json

asp ti query 1.2.3.4 --artifact-type "IP Address" --provider OpenCTI --output json