IoC

TH.find_ioc(ioc_type: str, list: list, config: Optional[dict] = None) → Union[str, bool]

Determine if certain IOC type is available in the current IOC imports list

Parameters

• ioc_type – The type of IOC to remove.

• list – The list of items (of the provided type) to find

• config – Configuration information [additional data, source, policy or description]

Available ioc types are:

• FileHashIoc: file IOC

• UrlIoc: url IOC

• IPIoc: ip IPC

• DomainIoc: domain IOC

Returns

IoC information if found, None otherwise

TH.get_ioc_between_dates(ioc_type: str, from_date: Union[int, float], to_date: Union[int, float], include_deleted: Optional[bool] = False) → str

find IOC types to the current imported IOC list

Parameters

• ioc_type – The type of IOC to import.

• to_date –

• from_date –

• include_deleted –

Available ioc types are:

• FileHashIoc: file IOC

• UrlIoc: url IOC

• IPIoc: ip IPC

• DomainIoc: domain IOC

Returns

IoC information if imported succesfully, None otherwise

TH.import_ioc(ioc_type: str, list: list, config: Optional[dict] = None, days: Optional[int] = None, retroespective: Optional[bool] = False) → Union[str, bool]

Add IOC types to the current imported IOC list

Parameters

• retroespective –

• ioc_type – The type of IOC to import.

• list – The list of items (of the provided type) to import

• config – Configuration information [additional data, source, policy or description]

• days – Number of days for this IOC to be active

Available ioc types are:

• FileHashIoc: file IOC

• UrlIoc: url IOC

• IPIoc: ip IPC

• DomainIoc: domain IOC

Returns

IoC information if imported succesfully, None otherwise

TH.remove_ioc(ioc_type: str, list: list, config: Optional[dict] = None) → Union[str, bool]

Remove IOC types from the current imported IOC list

Parameters

• ioc_type – The type of IOC to remove.

• list – The list of items (of the provided type) to remove

• config – Configuration information [additional data, source, policy or description]

Available ioc types are:

• FileHashIoc: file IOC

• UrlIoc: url IOC

• IPIoc: ip IPC

• DomainIoc: domain IOC

Returns

True if succesfull, False otherwise