: Tag Identifiers
Focus
Focus
Table of Contents

Tag Identifiers

Field Name
Artifact Type as it Appears on AutoFocus Web Portal
Field Type
Acceptable Values and Examples
alias
Alias
typeAheadSelect
Valid AutoFocus tag.
Example:
Cekar
customer
Author Company
String
Valid organization that created the tag.
Example:
Palo Alto Networks
author
Author Email
exactString
Valid email address of the tag creator.
Example:
john.doe@company.com
tag_class
Class
Select
Valid tag class.
Example:
Malware Family
created
Created
Date
The creation date of a tag.
Example:
2015-09-21T11:33:20
description
Description
String
The description contained in a tag.
Example:
advertising banners
comments
# Comments
Number
The number of comments associated with a tag.
Example:
2
lastComment
Last Comment
Date
The date of the last comment added to a tag.
Example:
2010-09-21T11:34:15
lastHit
Last Hit
Date
The time at which the most recent sample matched to the tag was detected.
Example:
2016-19-21T11:31:10
matchCriteria
Match Criteria
String
The definition contained within a tag.
Example:
sample.exe
tag_name
Name
String
The name of an AutoFocus tag.
Example:
Sconato
reference
References
String
External references providing more information or context for the given threat.
Example:
Symantec
numSamples
# Samples
Number
The total number of private and public samples matched to the tag.
Example:
4
tagType
Scope
Select
A valid tag type.
Example:
private
source
Source
String
Organization or individual that discovered the threat defined in the tag.
Example:
Secureworks
status
Status
Select
The current operational status of a tag.
Example:
Removing
upVotes
# Up Votes
Number
The number of up‐votes the tag has received from the AutoFocus community.
Example:
2
updated
Updated
Date
The date and time that the tag was most recently modified.
Example:
2016-19-21T11:31:10

Recommended For You