Enricher - Flashpoint Torrents#
Note
This article describes how to configure a particular enrichment source. To see how to configure enrichers in general, see Configure enrichers.
Specifications |
|
---|---|
Enricher name |
Flashpoint Torrents |
Input |
Company, hash-sha1, ipv4, and registrar. |
Output |
Enriches supported observable types with indicators and related enrichment observables that provide details on torrent downloads and seeding peers the input IP address, or related to the company name or registrar information used as input.
|
API endpoint |
|
Description |
The Flashpoint Torrents enricher provides information on a range of cyber threat data focusing on torrent users and activities related to terrorism, hacking, and extremism. |
Configure the enricher parameters#
Edit the enricher.
From the Observable types drop-down menu, select one or more observable types you want to enrich with data retrieved through the Flashpoint Torrents enricher.
The API URL field is automatically filled in with the default domain for the endpoint.
You can add a proxy or set up ports according to your needs.
Default value:https://fp.tools/api/v4/torrents/peers
.In the Token field, enter a valid token associated with the Flashpoint account to access and consume the corresponding Flashpoint service.
To store your changes, click Save; to discard them, click Cancel.