RiskIQ Blacklist

Updated 8 months ago by TruSTAR

This document explains how to set up the RiskIQ Blacklist premium intelligence source in the TruSTAR platform.

RiskIQ's Blacklist delivers curated lists of known bad URLs, Domains, and IP addresses associated with malware, phishing, and scam events.

  • Source Type: Premium Intel
  • Update Type: Query-based
  • Parser: Yes
  • Time to Install: 10 minutes

Observables Supported

  • IP
  • URL
  • Domain (Extracted from URL by TruSTAR)

Requirements

  • Licensed user of RiskIQ
  • API key for RiskIQ Blacklist lookup
TruSTAR Admin rights are required to activate this Premium Intelligence source.

Getting Started

  1. Log into the TruSTAR Web App.
  2. Click the Marketplace icon on the Navigation Bar.
  3. Click Premium Intel.
  4. Click Subscribe on the RiskIQ Blacklist box.
  5. Enter your RiskIQ API key and click Save Credentials & Request Subscription.
Find your RiskIQ API keys: https://api.riskiq.net/api/manage_apikey.html

TruSTAR will validate the integration within 48 hours and send an email when the integration has been enabled.

Known Issues

No reported issues.

Please contact support@trustar.co if you have issues with this integration.

How Did We Do?