Tag Identifiers

Field Name
Artifact Type as it Appears on AutoFocus Web Portal
Field Type
Acceptable Values and Examples
alias
Alias
typeAheadSelect
Valid AutoFocus tag.
Example:
Cekar
customer
Author Company
String
Valid organization that created the tag.
Example:
Palo Alto Networks
author
Author Email
exactString
Valid email address of the tag creator.
Example:
john.doe@company.com
tag_class
Class
Select
Valid tag class.
Example:
Malware Family
created
Created
Date
The creation date of a tag.
Example:
2015-09-21T11:33:20
description
Description
String
The description contained in a tag.
Example:
advertising banners
comments
# Comments
Number
The number of comments associated with a tag.
Example:
2
lastComment
Last Comment
Date
The date of the last comment added to a tag.
Example:
2010-09-21T11:34:15
lastHit
Last Hit
Date
The time at which the most recent sample matched to the tag was detected.
Example:
2016-19-21T11:31:10
matchCriteria
Match Criteria
String
The definition contained within a tag.
Example:
sample.exe
tag_name
Name
String
The name of an AutoFocus tag.
Example:
Sconato
reference
References
String
External references providing more information or context for the given threat.
Example:
Symantec
numSamples
# Samples
Number
The total number of private and public samples matched to the tag.
Example:
4
tagType
Scope
Select
A valid tag type.
Example:
private
source
Source
String
Organization or individual that discovered the threat defined in the tag.
Example:
Secureworks
status
Status
Select
The current operational status of a tag.
Example:
Removing
upVotes
# Up Votes
Number
The number of up‐votes the tag has received from the AutoFocus community.
Example:
2
updated
Updated
Date
The date and time that the tag was most recently modified.
Example:
2016-19-21T11:31:10

Recommended For You