Whitelist file indicators

The Whitelist File Indicator feeds provide continuous streams of known-good (whitelisted) files and changes to whitelist status.

Common Use Cases

Get newly whitelisted files

• Whitelisted files (new) (TCF-0501) - Continuous list of files confirmed as known-good from trusted sources.

Monitor whitelist changes

• Whitelisted files (changes) (TCF-0502) - Files whose whitelist status changed (KNOWN to MALICIOUS or SUSPICIOUS).

All Whitelist File Indicator Feeds

📄️ Whitelisted files (new) (TCF-0501)

This service provides a continuous list of whitelisted samples in the Spectra Intelligence system.

📄️ Whitelisted files (changes) (TCF-0502)

This service provides a continuous list of samples whose whitelisted status changed; i.e. samples that changed classification from KNOWN to MALICIOUS or SUSPICIOUS.