search_software_toolkits
Identify software toolkits (collections) in Google Threat Intelligence to detect threats. Sort results by relevance or creation date, then retrieve detailed reports.
Instructions
Search software toolkits (or just tools) in the Google Threat Intelligence platform.
Software toolkits are modeled as collections. Once you get collections from this tool, you can use get_collection_report to fetch the full reports and their relationships.
You can use order_by to sort the results by: "relevance", "creation_date". You can use the sign "+" to make it order ascending, or "-" to make it descending. By default is "relevance-"
Args: query (required): Search query to find threats. limit: Limit the number of threats to retrieve. 10 by default. order_by: Order results by the given order key. "relevance-" by default.
Returns: List of collections, aka threats.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | Yes | ||
| order_by | No | relevance- |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |