cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1232
Views
5
Helpful
3
Replies

how to search bulk IOC's

how to search bulk IOC's

3 REPLIES 3
Matthew Franks
Cisco Employee

I'm not entirely sure what you meant by that, but you can see all of the Indicators of Compromise under Analysis>Indicators in. the portal, or via this link.  You can also query them via the API here. Finally, you can search your events page for Indicators like this.  Hopefully that answers your question.

Thanks,

Matt

Hi Matthew,

 

I mean searching custom IOC's as bulk at one short .

 

Regards,

Pruthvi

I'm still not 100% certain what you're asking but you can search all of your custom IOCs in the AMP Console here.

 

Thanks,

Matt

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE Demo (100%)

Content for Community-Ad