Threat Intelligence Search API

Threat Intelligence Search:

Threat Intelligence API enables security professionals to perform threat hunting and detect unknown threats.

Pattern search our large corpus of intelligence data to find new threats based on predefined expressions, such as malware families, malware threat names, AV detection filtering, first/last seen, etc.

Similarity search techniques uses hundreds of features to find samples that share the same behavior, composition or code. This enables detection of unknown samples and improved Indicator of Compromise (IOCs) hunting.

Reputation API:

MetaDefender Cloud allows users to verify if an IP address, domain, or URL has been identified as malicious using billions of data points that get updated near real-time. This allows our customers to stay ahead of emerging threats and protect your assets. Accessing this data is very easy: either as a service in MetaDefender Cloud, a module in MetaDefender Core, as an integration in OPSWAT Sandbox Filescan’s automated processing pipeline or as a standalone API.

Furthermore, MetaDefender Cloud provides two basic ways of verifying reputation for each type:

Single scan (Scanning IP / Domain / URL)

Bulk scans (Scanning list of IPs / Domains / URLs)

More docs related:

https://docs.opswat.com/mdcloud/metadefender-cloud-api-v4#tag-reputation-service

Available for lower tier purchase here: https://metadefender.opswat.com/store