Feature only available in Maltiverse Enterprise Plan
This feature allows to load IoCs by the customer security team in an isolated and confidential database.
The scoring and expiration algorithms designed by the Maltiverse team will be applied to these private indicators to maximize results and reduce noise.
In conjunction with Private/Public/Community feeds, the deployment of indicators to the devices defined by the client can be automated.
If Private Instance feature is enabled a new menu entry will be available as “Upload Indicators” where is possible to upload new IoCs by following 3 steps wizard:
Alternatively it is possible to use the API PUT endpoints to automate IoC upload to the platform:
Once IoCs are successfully uploaded you will find them in the IoC Search section, where an instance selector button will be available with three possible values:
|Select only the IoCs located in the private instance (Indicators uploaded by teams)
|Select only the IoCs located in the public instance (Maltiverse Dataset)
|Select indicators both from Private and Public instances
To retrieve all IoCs you can just type a wildcard in the search input: