New docs portal launching December 21st! All Exabeam, LogRhythm, and API documentation is moving to docs.exabeam.com. Existing links will redirect automatically, but we recommend updating your bookmarks.
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
7.26.0 7.25.0 7.24.0 7.23.0 7.22.0 7.21.0 7.20.0 7.19.0 7.18.0
Breadcrumbs

Cisco AMP Threat Grid



LogRhythm List

Vendor List

LR Threat List : File Path : Malware

ThreatGrid : File Path: Malware : All
ThreatGrid : File Path: Malware : Top

LR Threat List : IP : Malware

ThreatGrid : IP : Malware : All
ThreatGrid : IP : Malware : Top

LR Threat List : URL : Malware

ThreatGrid : URL : Domain : All
ThreatGrid : URL : Domain : Top
ThreatGrid : URL : Malware : All
ThreatGrid : URL : Malware : Top

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : Banking Trojan : All

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : DLL Hijacking : All

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : Downloaded Executable : All

LR Threat List : IP : Suspicious

Cisco AMP Threat Grid : Host : Dynamic DNS : All

LR Threat List : IP : Suspicious

Cisco AMP Threat Grid : Host : IRC : All

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : Modified Hosts : All

LR Threat List : IP : Suspicious

Cisco AMP Threat Grid : Host : Parked : All

LR Threat List : IP : Suspicious

Cisco AMP Threat Grid : Host : Public IP : All

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : Remote Access Trojan : All

LR Threat List : IP : Attack

Cisco AMP Threat Grid : Host : Sinkholed : All

LR Threat List : IP : Malware

Cisco AMP Threat Grid : Host : Stolen Cert : All


The LogRhythm (parent) Lists to be associated with the “Cisco AMP Threat Grid” lists are labeled “IP,” though they are technically host lists. There is a much higher probability of matching on the host metadata fields than a URL.