Developer Documentation

Here is a list of documents for developer that would like to integrate with Cisco Threat Response:

• Authentication, User Data Model, OAuth2 Integration
• Blocklist Generation using COAs, Indicators and Judgements with CTIA

List to Cisco Threat Response APIs:

Links to Threat Intel Servers APIs:

• Public Intel
• Private Intelligence

You can login directly into the interfaces to try the APIs.

All notable changes to the APIs of the IROH project are listed and documented hereafter.