We have a subscription to a Threat Intelligence service and they offer an API service to download their IOC feeds.
Is there a way to create a recurring feed subscription to their API within Security Analytics.
The output received from a query is in JSON format.
thanks.
I'd like to bump this thread as we are looking at more and more json formatted feeds both from api calls to SA's web interface we'd like to turn back into feeds or other $vendor threat intel feeds published in json. So far I have only seen the customization in live's custom feed interface take csv formatting. Any plans to expand this or can we import json feeds another way?