Incoming feed - Censys#

Note

This article describes how to configure incoming feeds for a particular feed source. To see how to configure incoming feeds in general, see Create and configure incoming feeds.


Specifications

Transport type

Censys Advanced Threat Intelligence Indicator Feed

Content type

Censys Indicator JSON

Ingested data

Retrieves Indicators with Observables

Processed data

Indicator with related Observables.

Description

Retrieve and process information on indicators

Configure the Incoming feed#

  1. Create an Incoming feed.

  2. From the Transport type drop-down menu, select Censys Advanced Threat Intelligence Indicator Feed.

  3. From the Content type drop-down menu, select Censys Indicator JSON.

  4. The API URL field is automatically filled in with the default domain for the endpoint: https://api.platform.censys.io/v3/global/search/query.
    You can add a proxy or set up ports according to your needs.

  5. In the API key field, enter your Censys Auth Token.

  6. In the Query field, provide your search query. For query format refer: documentation.

  7. Select the Start ingesting from field, use the drop-down calendar to select a start date, and set a start time. The feed will fetch content from the stream starting from the time you specified.

  8. To store your changes, select Save.