Get Community Trending Indicators¶
GET /1.3/indicators/community-trending
Warning
Deprecated! This endpoint is still active for backwards-compatibility, but will no longer be maintained / supported.
Description¶
Returns the 10 indicators that have recently appeared in the most community reports. This is analogous to the Community Trends section of the dashboard on Station.
Parameters¶
| Parameter | Required | Default | Description |
|---|---|---|---|
| type | null |
The types of indicators to be returned. Allowed values are CVE, MALWARE, and null. If null,
then all indicator types except for CVE and MALWARE will be returned. |
|
| daysBack | 3 | The number of days back to count correlations for. Any value between 1 and 30 is allowed. |
Response (200)¶
A list of Indicator objects. The objects will have the correlationCount field filled out, and will be
sorted by this field in descending order.
Example Usage¶
Request¶
curl -k -H "Authorization: Bearer {access_token}" \
"https://api.trustar.co/api/1.3/indicators/community-trending?daysBack=7&type=MALWARE"
Response¶
[
{
"indicatorType": "MALWARE",
"correlationCount": 36,
"value": "RIG"
},
{
"indicatorType": "MALWARE",
"correlationCount": 23,
"value": "MAGNITUDE"
},
{
"indicatorType": "MALWARE",
"correlationCount": 21,
"value": "ANGLER"
},
{
"indicatorType": "MALWARE",
"correlationCount": 18,
"value": "LOCKY"
},
{
"indicatorType": "MALWARE",
"correlationCount": 17,
"value": "NEUTRINO"
},
{
"indicatorType": "MALWARE",
"correlationCount": 14,
"value": "POISONIVY"
},
{
"indicatorType": "MALWARE",
"correlationCount": 14,
"value": "GH0ST"
},
{
"indicatorType": "MALWARE",
"correlationCount": 9,
"value": "JRAT"
},
{
"indicatorType": "MALWARE",
"correlationCount": 7,
"value": "HACKINGTEAM"
},
{
"indicatorType": "MALWARE",
"correlationCount": 3,
"value": "BABYLON"
}
]