Data Feeds

The Data Feeds section lists data sources and links that you can use to download Threat Data Feeds. Depending on your license, you can download a feed in one of the following versions:

• Full feed—Full version of the Threat Data Feed. Available if you have a valid license for this feed.
• Demo—Demo version of the Threat Data Feed. Available if you do not have a valid license for this feed. Demo versions contain fewer indicators, are updated less frequently and have a significantly lower detection rate compared to the commercial version of the feed. We do not recommend using demo versions of feeds in production.
• Sample—Shortened version of the feed that contains the top 10 most popular records from the full feed version. Available if you do not have a valid license for this feed.

For each Threat Data Feed, tags describing the intended use of the feed are displayed: Detection, Prevention, and Investigation.

The list also contains Threat Data Feeds marked with the META label. META feeds are region-specific versions of the regular feeds in JSON format. These feeds provide the best coverage for threats observed in META region, while regular feeds focus on worldwide coverage. We recommend that you use META feeds when network traffic is limited by META region.

For each Threat Data Feed, the number of records and update frequency are displayed.

You can click the required Threat Data Feed to view its JSON structure and elements description. In the window that opens, you can also click the Download ZIP archive button to download the selected Threat Data Feed.

The Related Materials section lists additional documents related to data feeds.

Page top