Updated Articles

  1. Social Events Updated

    Social events are available to External Threats customers subscribed to the Social Brand Threats or Social Executive Threats modules . They alert customers to unauthorized social profiles claiming to represent their brand and/or an executive or em...
  2. Flashpoint Deep and Dark Web Integration

    Overview This integration is available to customers subscribed to the Deep and Dark Web module of RiskIQ External Threats , which is powered by our Deep and Dark Web partner, Flashpoint ( https://www.flashpoint-intel.com ), or who are currently mu...
  3. Phish Events

    Phish events are available to External Threats customers subscribed to the Brand Phishing module. They alert customers to phishing pages targeting their brands and customers.  RiskIQ ingests millions suspected phishing URLs every day from a ...
  4. Event Lifecycle Performance Metrics

    This article provides definitions and information on the metrics recorded for External Threat events and related enforcement actions. This data can be viewed by downloading event data from your workspace using the button at the top right of the even...
  5. API Documentation

    The latest RiskIQ API documentation may be found at https://sf.riskiq.net/crawlview//api/docs/ The latest PassiveTotal API documentation may be found at https://api.passivetotal.org/api/docs/ The latest Security Intelligence Services API docum...
  6. Event API POST

    Overview Within the API settings of your workspace, you can set up an API Post URL. If this URL is set, then for each event-type with API POST enabled in it's configuration settings, a response will be pushed to the Post URL for the workspace a...
  7. Event Search

    This article provides definitions and instructions for searching events within the RiskIQ interface and API, including: Using quick filters Building  queries in the search bar  Saving queries for later use Sorting and pagination Sear...
  8. MITRE's CRITS

    MITRE's CRITS CRITs is an open source malware and threat repository that leverages other open source software to create a unified tool for analysts and security experts engaged in threat defense. The PassiveTotal CRITs service allows anal...
  9. MISP

    MISP The Malware Information Sharing Platform ( MISP ) is an open source repository for sharing, storing and correlating Indicators of Compromises of targeted attacks. As with all of our integration's, PassiveTotal brings all of our core da...
  10. Maltego

    Maltego Maltego is a link analysis tool that allows for quick visualization and aggregation of data sets. PassiveTotal puts more than 100 transforms at our users finger tips, makings it easier than ever to harness the full power of our data w...