Notifications
Clear all
Anomali Reviews
1
Posts
1
Users
0
Reactions
4
Views
Topic starter
15/07/2026 12:24 am
Anomali's manual GUI for IOC feeds is a bottleneck. We have internal sources generating thousands of indicators daily. Clicking through the UI isn't scalable or auditable.
Looking for the actual automation path. Specifically:
* Is there a supported API for indicator management (CRUD)?
* CLI tools or scripts from Anomali, or is it all custom REST?
* What's the expected format for bulk ingestion? STIX/TAXII, or a proprietary JSON schema?
Need details on how this is supposed to work in a real SOC. If the answer is "buy a different module," I want to see that in the docs.
Trust but verify