<field>

Specify a field name. Fields having IPv4 addresses, domain names, for file hashes can be used to pull in data from RecordedFuture.

Usage

You can use the recordedfuture operator to enrich results with information from the ThreatStream RecordedFuture enrichment.

Examples

Example 1: Enrich source IP address with RecordedFuture threat intelligence.

Example 2: Creates an inline list of two IPs and enriches each with Recorded Future threat intelligence data.