ZeroFox Threat Intelligence

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• lookup domain: Check for the presence of a domain in the ZeroFox Threat Intelligence Feed
• lookup ip: Check for the presence of an IP in the ZeroFox Threat Intelligence Feed
• lookup exploit: Check for the presence of a exploit in the ZeroFox Threat Intelligence Feed
• lookup hash: Check for the presence of a hash in the ZeroFox Threat Intelligence Feed
• lookup email: Lookup Email Address
• on poll: Callback action for the on_poll ingest functionality