ThreatExchange

This document provides guidance on how to integrate ThreatExchange with Google SecOps.

Configure ThreatExchange integration in Google Security Operations

For detailed instructions on how to configure an integration in Google SecOps, see Configure integrations.

Actions

Get Reputations

Description

Get reputations for a given entity.

Parameters

N/A

Run On

This action runs on the following entities:

• Filehash
• Hostname
• IP Address
• URL

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result

JSON Result

N/A

Ping

Description

Verify that the user has a connection to Threat Exchange via the user's device.

Parameters

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result

JSON Result

N/A

Need more help? Get answers from Community members and Google SecOps professionals.