ThreatObservable
A valid Incident Orchestration license is required for this resource
A ThreatObservable is a collection of threatObservables associated with threat such as Link, IP-address, File hash etc.
Implements
Fields
_id (
ID!)
ID
createdAt (
Date)
When was this created?
fileHash (
String)
File hash (SHA256) of threatObservable, if applicable
ip (
String)
IP address of threatObservable, if applicable
linkUrl (
String)
Url address of threatObservable, if applicable
organization (
Organization)
Organization where this observable was spotted
threat (
Threat)
Threat of which this ThreatObservable is part of
updatedAt (
Date)
When was this last updated?