Sixgill Darkfeed

Sixgill's premium underground intelligence collection capabilities, real-time collection, and advanced warning about IOCs help you keep your edge against unknown threats

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• on poll: Scheduled/Automated ingestion of all the new Darkfeed IOCs detected since the last ingestion
• enrich ip: Query the Sixgill Darkfeed for the specified IP and receive all the IOCs matching that IP
• enrich url: Query the Sixgill Darkfeed for the specified URL and receive all the IOCs matching that URL
• enrich domain: Query the Sixgill Darkfeed for the specified domain and receive all the IOCs matching that domain
• enrich hash: Query the Sixgill Darkfeed for the specified hash and receive all the IOCs matching that hash
• enrich post id: Query the Sixgill Darkfeed for the specified Sixgill Post ID (i.e. unique identifier of a specific post shared in the underground) and receive all the IOCs shared in that post
• enrich threat actor: Query the Sixgill Darkfeed for the specified threat actor and receive all the IOCs shared by that threat actor