https://community.splunk.com/t5/Splunk-Enterprise-Security/Threat-intelligence-framework/m-p/517324#M9213 <P>Hi ,</P><P>Can anyone provide me approach/steps for integrating threat intelligence framework to Splunk ES.</P><P>Also , how to pull active thread feed, export offensive IP list to CSV and get hash file list from API through endpoint URL(i have that URL) using python script .</P><P>I didn't understand clearly mentioned on Splunk doc so if anyone can put it together in simplified form.</P><P>&nbsp;</P><P>Thanks&nbsp;</P> Tue, 01 Sep 2020 19:37:47 GMT abhinav_go 2020-09-01T19:37:47Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Threat-intelligence-framework/m-p/517324#M9213 <P>Hi ,</P><P>Can anyone provide me approach/steps for integrating threat intelligence framework to Splunk ES.</P><P>Also , how to pull active thread feed, export offensive IP list to CSV and get hash file list from API through endpoint URL(i have that URL) using python script .</P><P>I didn't understand clearly mentioned on Splunk doc so if anyone can put it together in simplified form.</P><P>&nbsp;</P><P>Thanks&nbsp;</P> Tue, 01 Sep 2020 19:37:47 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Threat-intelligence-framework/m-p/517324#M9213 abhinav_go 2020-09-01T19:37:47Z