Partner McAfee Threat Intelligence Exchange Integration for Resilient 1.0.0

This extension function for IBM Resilient allows a manual or automatic workflow to lookup a file hash in McAfee TIE.

The McAfee Threat Intelligence Exchange function searches for information on a file hash within Threat Intelligence Exchange. The function takes as an input a file hash along with the type of hash and returns information relative to the file. This information can come from any of the providers (Enterprise, GTI, ATD, MWG) in addition to a system list. The example searches on artifacts of hash types MD5, SHA1, and SHA256 and populates a results data table with Enterprise file provider information.