Whitelist file indicators
The Whitelist File Indicator feeds provide continuous streams of known-good (whitelisted) files and changes to whitelist status.
Common Use Cases
Get newly whitelisted files
- Whitelisted files (new) (TCF-0501) - Continuous list of files confirmed as known-good from trusted sources.
Monitor whitelist changes
- Whitelisted files (changes) (TCF-0502) - Files whose whitelist status changed (KNOWN to MALICIOUS or SUSPICIOUS).
All Whitelist File Indicator Feeds
📄️ Whitelisted files (new) (TCF-0501)
Spectra Intelligence TCF-0501 provides continuous list of newly whitelisted known-good files
📄️ Whitelisted files (changes) (TCF-0502)
Spectra Intelligence TCF-0502 tracks changes to whitelist status from known-good to malicious/suspicious