Custom Threat Feeds: Replace VT Score with Cb Reputation Threat Score

[#1]

Version

All versions of Cb Response

Issue

As of October 16, 2017, the Virus Total feed has been deprecated in favor of the more robust Cb Reputation Threat Score.  Any custom feeds that use the VT score will no longer function as expected.

Cause

The Cb Response Team has deprecated the VT feed.

Solution

Custom Threat Feeds should be updated to replace all references to the VT feed with the Cb Reputation Threat Score.  Queries contained in the feed will need to be updated per the KB article here Queries: Replace VT Score with Cb Reputation Threat Score . All references to watchlists will need to be changed to point to updated watchlists per the KB article here Watchlists: Replace VT Score with Cb Reputation Threat Score . Please ensure that you review how the Cb Reputation Threat Score is reported so you ensure that your updated query works as expected.