Automate Feed Scanner exports

Once you have created a search in Feed Scanner that you would like to export for use with integrations, automation, or scripts you can use our "Automate Export" capability. Silent Push allows you to automate the Feed Scanner search of code snippets that facilitate a connection between your existing security stack, and Feed Scanner data obtained from Silent Push, through the use of an API key.

Strings are exported either as an endpoint URL, or as a code snippet.

Automate Export
  1. To export indicators from a saved search in 'Feed Scanner', select Automate Export in the table header of the results table to bring up a modal
  2. In the modal, you are then asked for the following:
    1. Enter Export Name - the name of the collection of indicators you would like to export
    2. Enter Description - a brief description of the collection of indicators you would like to export
    3. Add Tags to categorize the export file you are creating for automation
    4. Choose to either export a raw list of indicators from your search (Indicator Only) or the indicators paired with all of the enrichment data you can search against and view in Feed Scanner (Enriched)
  3. Click Automate Export and then a new modal will pop-up with code snippets you can use to access the export you've created
  4. Click on a tab to choose which language you want a snippet in and then copy it to leverage in your integration:
    1. API Endpoint
    2. cURL
    3. Python
    4. PHP
  5. If you are using an integration that requires a UUID of a Feed Scanner search as input, you can find it in the API Endpoint after the organization-exports path as seen in the following:
https://app.silentpush.com/api/v2/export/organization-exports/{UUID}_indicators.csv

To feed Silent Push data into your existing security stack, integrate the endpoint text string into your security tools (SOAR, Sentinel, Azure etc.)

To modify individual endpoints, please refer to the Silent Push API documentation.