Enrich IOCs (live)
enrich_iocsCross-reference IOCs with ThreatFox, MalwareBazaar, AbuseIPDB, and DNS data to return enrichment metadata and threat intelligence matches.
Instructions
Get enrichment metadata for IOCs — cross-references with ThreatFox, MalwareBazaar, AbuseIPDB/IPsum, and DNS data. Returns enrichment status and any matching threat intelligence from external feeds.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | IOC type filter (default: all) | |
| limit | No | Max results (default 20) | |
| query | Yes | IOC value or search query to enrich |