# File Indicators Feed — Spectra Intelligence

> Spectra Intelligence File Indicator feeds deliver continuous streams of newly detected malware, AV scan results, classification changes, and first-scan file hashes.

The Malicious File Indicator feeds provide continuous streams of newly detected malware samples, AV scan results, and classification changes from the Spectra Intelligence system.

## Common Use Cases

### Get newly detected malware

- **[Malware detection feed (TCF-0101)](tcf-0101.md)** - Continuous list of samples with at least one AV detection.
- **[Malware detection feed (platform-filtered) (TCF-0102-0106)](tcf-0102-0106.md)** - Malware detections filtered by platform (Windows, Android, macOS, etc.).

### Track all scanned files

- **[New files (first scan) (TCF-0107)](tcf-0107.md)** - Files scanned for the first time in the system.
- **[New files (first and rescan) (TCF-0108)](tcf-0108.md)** - All files scanned or rescanned.

### Monitor classification changes

- **[Files with detection changes (TCF-0109)](tcf-0109-V3.md)** - Files showing detection changes between AV scans.
- **[Malware presence change events feed (TCF-0111)](tcf-0111.md)** - New malicious samples, false positives, and threat name changes.

## All Malicious File Indicator Feeds


