search_threat_reports
Search Google Threat Intelligence for threat reports and collection summaries to identify campaigns, vulnerabilities, and malware based on query.
Instructions
Search threat reports in the Google Threat Intelligence platform.
Google Threat Intelligence provides continuously updated reports and analysis of threat actors, campaigns, vulnerabilities, malware, and tools
Threat reports are modeled as collections. Once you get collections from this tool, you can use get_collection_report to fetch the full reports and their relationships.
You can use order_by to sort the results by: "relevance", "creation_date". You can use the sign "+" to make it order ascending, or "-" to make it descending. By default is "relevance-"
Args: query (required): Search query to find threats. limit: Limit the number of threats to retrieve. 10 by default. order_by: Order results by the given order key. "relevance-" by default.
Returns: List of collections, aka threats.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | Yes | ||
| order_by | No | relevance- |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |