Intel471Ex.Indicators (intel471_ex v0.2.0)

Copy Markdown

Functions for working with the Intel 471 Verity Indicators API.

Service path: integrations/indicators/v1

Summary

Functions

get_by_id(id)

Get an indicator by ID.

stream(params \\ %{})

Stream indicators matching filter criteria (cursor-paginated).

Functions

get_by_id(id)

@spec get_by_id(String.t()) :: {:ok, map()} | {:error, any()}

Get an indicator by ID.

Parameters

  • id: The indicator identifier

Examples

{:ok, indicator} = Intel471Ex.Indicators.get_by_id("indicator-id")

stream(params \\ %{})

@spec stream(map()) :: {:ok, map()} | {:error, any()}

Stream indicators matching filter criteria (cursor-paginated).

Parameters

  • params: A map of query parameters
    • :type — Indicator type (e.g., "domain", "url", "ip")
    • :threat_type — Threat type
    • :confidence — Confidence level
    • :text_filter — Free text search
    • :malware_id — Filter by malware ID
    • :malware_family_id — Filter by malware family ID
    • :malware_family_name — Filter by malware family name
    • :girs — Filter by GIRs
    • :from / :until — Time range
    • :size / :cursor — Pagination

Examples

{:ok, result} = Intel471Ex.Indicators.stream(%{type: "domain", size: 10})