Skip to content
Threat Intelligence
  • Alerts
  • Downloads
  • Links
  • IOC Feeds
Subscribe

Nifi

  • Home
  • Nifi
Nifi Groovyscript to convert JSON table array to key value JSON format
Posted inNifi sentinel SentinelOne

Nifi Groovyscript to convert JSON table array to key value JSON format

If you have data in a nested table array you can convert it to the standard key:value JSONpair by using the below groovyscript. Below is a sample of the data…
Posted by threatinfo August 4, 2025
NiFi Groovy Script to Find 1st and Last IPs in Subnet
Posted inNifi

NiFi Groovy Script to Find 1st and Last IPs in Subnet

Takes a subnet cidr from a flowfile attribute called subnetCidr as shown below and returns the first and last usable IP addresses as attributes Add the below code into the script…
Posted by threatinfo April 23, 2025
Pushing Bulk Indicators to Multiple Sentinel Instances for a MSSP
Posted inNifi sentinel Threat Intelligence

Pushing Bulk Indicators to Multiple Sentinel Instances for a MSSP

Problem We manage a MISP instance which receives over 130,000 IOCs every day from multiple sources which we need to push to over 22 Microsoft Sentinel instances which we manage.…
Posted by threatinfo November 29, 2024
Microsoft Defender Indicator API Always Generates Alerts
Posted inDefender Nifi

Microsoft Defender Indicator API Always Generates Alerts

No matter how hard I try, I cannot get the Microsoft Defender Indicator API https://api.securitycenter.microsoft.com/api/indicators/import to import IOCs with the Generate alert flag off. I have tried the below to no…
Posted by threatinfo November 29, 2024
Posted inNifi

Configuring Nifi with Azure Key Vault Secrets Parameter Providers

To integrate Nifi with an Azure Key Vault follow the below steps Step 1 - Add Parameter Provider Go into Controller Settings -> Parameter Providers and add an AzureKeyVaultSecretsParameterProvider as…
Posted by threatinfo October 4, 2024
Copyright 2026 — Threat Intelligence. All rights reserved. Bloghash WordPress Theme
Scroll to Top