get_threat_profile
Retrieve a comprehensive threat profile by its identifier, including interests, aliases, targeted industries, and regions to support security investigations.
Instructions
Get Threat Profile object.
A threat profile object contains the following attributes:
enable_recommendations (bool): whether or not Recommendations automatically generated by our ML are enabled.
interests (dict): Threat Profile's configured interests such as industries, target regions, source regions, malware roles and actor motivations to recommend the most relevant threats.
INTEREST_TYPE_TARGETED_INDUSTRY (list[str]): List of targeted industries.
INTEREST_TYPE_TARGETED_REGION (list[str]): list of targeted regions (ISO-3166 country code).
INTEREST_TYPE_SOURCE_REGION (list[str]): list of source regions (ISO-3166 country code).
INTEREST_TYPE_MALWARE_ROLE (list[str]): list of malware roles.
INTEREST_TYPE_ACTOR_MOTIVATION: (list[str]): list of threat actors motivations.
last_modification_date: Threat Profile's last modification date (UTC timestamp).
name (str): Threat Profile's name.
creation_date (int): Threat Profile's creation date (UTC timestamp).
aliases (list[str]): alternative names by which the threat actor is known.
description (str): description / context about the threat actor.
first_seen_date (int): estimated threat actor's first seen date of activity (UTC timestamp).
last_seen_date (int): estimated threat actor's last seen date of activity (UTC timestamp).
last_modification_date (int): last time when the threat actor was updated (UTC timestamp).
related_entities_count (int): estimated number of related IOCs to the threat actor.
source_region (str): threat actor's source region.
sponsor_region (str): region sponsoring the threat actor.
targeted_industries (list[str]): list of industries the threat actor has targeted.
targeted_regions (list[str]): list of regions the threat actor has targeted.
Args: profile_id (str): Threat Profile identifier at Google Threat Intelligence.
Returns: Threat Profile object.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |