cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2777
Views
5
Helpful
3
Replies

how to search bulk IOC's

Pruthvirajnasagoni89418
Frequent Visitor
Frequent Visitor

how to search bulk IOC's

3 Replies 3

Matthew Franks
Cisco Employee
Cisco Employee

I'm not entirely sure what you meant by that, but you can see all of the Indicators of Compromise under Analysis>Indicators in. the portal, or via this link.  You can also query them via the API here. Finally, you can search your events page for Indicators like this.  Hopefully that answers your question.

Thanks,

Matt

Hi Matthew,

 

I mean searching custom IOC's as bulk at one short .

 

Regards,

Pruthvi

I'm still not 100% certain what you're asking but you can search all of your custom IOCs in the AMP Console here.

 

Thanks,

Matt