getIOC2TA demonstrates the use of the Mandiant Threat Intelligence Platform API for threat intelligence tasks.
Demonstrate the use of Mandiant Threat Intelligence Platform API
This tool is designed for security professionals and threat hunters who need to automate the process of checking IP addresses against the Mandiant Threat Intelligence Platform. By leveraging the API, users can efficiently gather threat intelligence data to enhance their security posture.
Ensure you have valid API credentials from Mandiant to use this tool effectively.
Create a list of IP addresses to check as 'ip.lst'.
Generate config with your Mandiant Threat Intelligence API Key using the command: 'getIOC2TA create_config <apiKey> <apiSecret>'.
Run the program using the command: 'getIOC2TA run'.getIOC2TA create_config <apiKey> <apiSecret>
Generates a configuration file using the provided Mandiant API key and secret.
getIOC2TA run
Executes the program to check the IP addresses listed in 'ip.lst'.