cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2249
Views
5
Helpful
3
Replies

how to search bulk IOC's

how to search bulk IOC's

3 Replies 3

Matthew Franks
Cisco Employee
Cisco Employee

I'm not entirely sure what you meant by that, but you can see all of the Indicators of Compromise under Analysis>Indicators in. the portal, or via this link.  You can also query them via the API here. Finally, you can search your events page for Indicators like this.  Hopefully that answers your question.

Thanks,

Matt

Hi Matthew,

 

I mean searching custom IOC's as bulk at one short .

 

Regards,

Pruthvi

I'm still not 100% certain what you're asking but you can search all of your custom IOCs in the AMP Console here.

 

Thanks,

Matt