Focus

AutoFocus™ What's New Guide

Tag Identifiers

Table of Contents

Tag Identifiers

Field Name	Artifact Type as it Appears on AutoFocus Web Portal	Field Type	Acceptable Values and Examples
alias	Alias	typeAheadSelect	Valid AutoFocus tag. Example: Cekar
customer	Author Company	String	Valid organization that created the tag. Example: Palo Alto Networks
author	Author Email	exactString	Valid email address of the tag creator. Example: john.doe@company.com
tag_class	Class	Select	Valid tag class. Example: Malware Family
created	Created	Date	The creation date of a tag. Example: 2015-09-21T11:33:20
description	Description	String	The description contained in a tag. Example: advertising banners
comments	# Comments	Number	The number of comments associated with a tag. Example: 2
lastComment	Last Comment	Date	The date of the last comment added to a tag. Example: 2010-09-21T11:34:15
lastHit	Last Hit	Date	The time at which the most recent sample matched to the tag was detected. Example: 2016-19-21T11:31:10
matchCriteria	Match Criteria	String	The definition contained within a tag. Example: sample.exe
tag_name	Name	String	The name of an AutoFocus tag. Example: Sconato
reference	References	String	External references providing more information or context for the given threat. Example: Symantec
numSamples	# Samples	Number	The total number of private and public samples matched to the tag. Example: 4
tagType	Scope	Select	A valid tag type. Example: private
source	Source	String	Organization or individual that discovered the threat defined in the tag. Example: Secureworks
status	Status	Select	The current operational status of a tag. Example: Removing
upVotes	# Up Votes	Number	The number of up‐votes the tag has received from the AutoFocus community. Example: 2
updated	Updated	Date	The date and time that the tag was most recently modified. Example: 2016-19-21T11:31:10

API Support for Enhanced Tag Retrieval

Parameter Types and Operators