Tag Identifiers

Field Name	Artifact Type as it Appears on AutoFocus Web Portal	Field Type	Acceptable Values and Examples
alias	Alias	typeAheadSelect	Valid AutoFocus tag. Example: Cekar
customer	Author Company	String	Valid organization that created the tag. Example: Palo Alto Networks
author	Author Email	exactString	Valid email address of the tag creator. Example: john.doe@company.com
tag_class	Class	Select	Valid tag class. Example: Malware Family
created	Created	Date	The creation date of a tag. Example: 2015-09-21T11:33:20
description	Description	String	The description contained in a tag. Example: advertising banners
comments	# Comments	Number	The number of comments associated with a tag. Example: 2
lastComment	Last Comment	Date	The date of the last comment added to a tag. Example: 2010-09-21T11:34:15
lastHit	Last Hit	Date	The time at which the most recent sample matched to the tag was detected. Example: 2016-19-21T11:31:10
matchCriteria	Match Criteria	String	The definition contained within a tag. Example: sample.exe
tag_name	Name	String	The name of an AutoFocus tag. Example: Sconato
reference	References	String	External references providing more information or context for the given threat. Example: Symantec
numSamples	# Samples	Number	The total number of private and public samples matched to the tag. Example: 4
tagType	Scope	Select	A valid tag type. Example: private
source	Source	String	Organization or individual that discovered the threat defined in the tag. Example: Secureworks
status	Status	Select	The current operational status of a tag. Example: Removing
upVotes	# Up Votes	Number	The number of up‐votes the tag has received from the AutoFocus community. Example: 2
updated	Updated	Date	The date and time that the tag was most recently modified. Example: 2016-19-21T11:31:10

Most Popular