This document explains how to set up and use the IBM X-Force premium intelligence source with the TruSTAR Web App.
IBM X-Force Exchange is a cloud-based threat intelligence sharing platform enabling users to rapidly research the latest security threats, aggregate actionable intelligence and collaborate with peers. Supported by human- and machine-generated intelligence, the Exchange leverages the scale of IBM X-Force to help users stay ahead of emerging threats
- Source Type: Premium Intel
- Update Type: Query-based
- Time to install: 10 minutes
The integration pulls the following Observables:
- A subscription to IBM X-Force
- IBM X-Force API Key
- Log into the TruSTAR Web App.
- Click the Marketplace icon on the left side icon list.
- Choose Premium Intel.
- Click Subscribe on the IBM X-Force box.
- Enter your IBM X-Force API key and click Save Credentials & Request Subscription.
TruSTAR will validate the integration within 48 hours and send an email when the integration has been enabled.
TruSTAR Report Mapping
<IOC Type> <IOC Value>
Encoded value of (<IOC Type> <IOC Value>)
Full json response
FirstSeen field of response
Client Meta Tag
No reported issues.
Please reach out to firstname.lastname@example.org if you have issues with this integration.