Trusted Certificates Feed — Whitelist File Indicators — Spectra Intelligence
The Whitelist File Indicator feeds provide continuous streams of known-good (whitelisted) files and changes to whitelist status.
Common Use Cases
Get newly whitelisted files
- Whitelisted files (new) (TCF-0501) - Continuous list of files confirmed as known-good from trusted sources.
Monitor whitelist changes
- Whitelisted files (changes) (TCF-0502) - Files whose whitelist status changed (KNOWN to MALICIOUS or SUSPICIOUS).
All Whitelist File Indicator Feeds
📄️ TCF-0501 — Whitelisted Files (New)
Consume TCF-0501 for a continuous stream of newly whitelisted known-good files from Spectra Intelligence; requires trusted source and at least two weeks between scans.
📄️ TCF-0502 — Whitelisted Files (Changes)
Consume TCF-0502 for a continuous list of Spectra Intelligence samples whose whitelist status changed from KNOWN to MALICIOUS or SUSPICIOUS, with MD5/SHA1/SHA256 and platform.