JSON Feed

Details
Content
Dependencies
Version History

Download With Dependencies

Indicators feed from a JSON file

Name	Description
JSON Feed	Fetches indicators from a JSON feed.

Name	Description
JSON Feed	Fetches indicators from a JSON feed.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

1.1.38 - R5469292 (October 20, 2025)

Integrations

JSON Feed

Fixed an issue where some HTTP requests were not sent.

Related pull requests:
- 40535

Download

1.1.37 - 3980324 (June 26, 2025)

Integrations

JSON Feed

Fixed an issue where existing indicators were not fetched.

Related pull requests:
- 40280

Download

1.1.36 - R3474673 (May 20, 2025)

Integrations

JSON Feed

Metadata and documentation improvements.

Related pull requests:
- 39144

Download

1.1.35 - R2988527 (March 26, 2025)

Integrations

JSON Feed

Fixed an issue in the JSONFeedApiModule where an error was unnecessarily raised when no indicators were retrieved from the feed.

Related pull requests:
- 38459

Download

1.1.34 - 2148169 (February 5, 2025)

Integrations

JSON Feed

Enhanced the feed to mark indicators as enrichment excluded when the tlp color is red.

Related pull requests:
- 38308

Download

1.1.33 - R1741355 (December 3, 2024)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.114656.

Related pull requests:
- 37059
- 37052
- 37051

Download

1.1.32 - 1457639 (October 1, 2024)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.112434.

Related pull requests:
- 36445

Download

1.1.31 - R1455125 (October 1, 2024)

Integrations

JSON Feed

Enhanced JSONFeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36004

Download

1.1.30 - 810472 (February 6, 2024)

Integrations

JSON Feed

Added the option to remove ports from IPv4 type indicators.
Updated the Docker image to: demisto/py3-tools:1.0.0.86899.

Related pull requests:
- 32223

Download

1.1.29 - 7122577 (December 10, 2023)

Integrations

JSON Feed

Fixed an issue where indicators were expiring due to prolonged periods of inactivity in the data source by implementing a solution that enforces a bi-daily update for existing indicators, even if the corresponding resource hasn't been updated.

Related pull requests:
- 31123

Download

1.1.28 - R5801668 (July 18, 2023)

Integrations

JSON Feed

Enhanced the JSONFeedApiModule to support fetching multiple indicator types in the AWS Feed integration. The change has no impact on this integration.

Related pull requests:
- 27141

Download

1.1.27 - R5450895 (June 5, 2023)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.47376.
Fixed an issue where in some cases the integration did not fetch any indicator due to memory leaks.
Fixed an issue with pylint error coming from xsoar-linter.

Related pull requests:
- 24410

Download

1.1.25 - 4444952 (January 22, 2023)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.44868.

Related pull requests:
- 23867

Download

1.1.24 - 4265201 (December 22, 2022)

Integrations

JSON Feed

Fixed an issue where an indicator did not have a tag.

Related pull requests:
- 23113

Download

1.1.23 - 4183367 (December 9, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.40638.

Related pull requests:
- 22844

Download

1.1.22 - 4092720 (November 24, 2022)

Integrations

JSON Feed

Fixed an issue where indicators with the same value but different tags were merged and the tags from only one indicator were retained.

Related pull requests:
- 22362

Download

1.1.21 - 4070054 (November 20, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.37427.

Related pull requests:
- 22352

Download

1.1.20 - R3994332 (November 8, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.36998.

Related pull requests:
- 22005

Download

1.1.19 - 3824820 (October 12, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.35208.

Related pull requests:
- 21672

Download

1.1.18 - 3649843 (September 13, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.33659.

Related pull requests:
- 21043

Download

1.1.17 - 3504083 (August 21, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.32758.

Related pull requests:
- 20644

Download

1.1.16 - 3240754 (July 11, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.31193.

Related pull requests:
- 19909

Download

1.1.15 - 3125048 (June 21, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.30715.

Related pull requests:
- 19656

Download

1.1.14 - 3056265 (June 8, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.30291.

Related pull requests:
- 19347

Download

1.1.13 - 2953671 (May 20, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.29493.

Download

1.1.12 - 2377451 (February 8, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.26536.

Download

1.1.11 - 2282159 (January 20, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.25751.

Download

1.1.10 - 2214870 (January 6, 2022)

Integrations

JSON Feed

Fixed an issue where adding the headers If-None-Match and If-Modified-Since to requests was not compatible with Cortex XSOAR with a version below 6.5.0.

Download

1.1.9 - R2146019 (December 21, 2021)

Integrations

JSON Feed

Maintenance and stability enhancements.

Download

1.1.8 - 1882648 (November 2, 2021)

Integrations

JSON Feed

Enhanced noUpdate flagging when fetching indicators using ETAG and Last-Modified headers.

Download

1.1.7 - 7681620 (September 19, 2021)

Integrations

JSON Feed

Updated the Docker image to: demisto/jmespath:1.0.0.23980.

Download

1.1.6 - 415742 (August 24, 2021)

Integrations

JSON Feed

Fixed an issue where fetching indicators in Cortex XSOAR with a version below 6.5.0 would fail.

Download

1.1.5 - 411893 (August 16, 2021)

Integrations

JSON Feed

Read ETAG and Last-Modified headers from feed response to support noUpdate signaling when creating indicators.

Download

1.1.4 - 382285 (June 9, 2021)

Integrations

JSON Feed

Internal infrastructure improvements.

Download

1.1.3 - 346806 (May 5, 2021)

Integrations

JSON Feed

Breaking Change: The integration now validates that both configuration params: Indicator Type and Auto detect indicator type are not set. You may set only one of the configuration params at a time. Previously, if both were set, Auto detect indicator type was used and Indicator Type was silently ignored.
Added the Include indicator type for mapping configuration option. When using a custom classifier and mapper with this feed, use this option to include the indicator type in the raw json used for classification and mapping.

Download

1.1.2 - 334630 (April 24, 2021)

Integrations

JSON Feed

Added support for headers and POST data.
Updated Docker image to demisto/jmespath:1.0.0.19143.

Download

1.1.1 - R264879 (January 27, 2021)

Integrations

JSON Feed

Internal code improvements.

Download

1.1.0 - R261222 (January 25, 2021)

Integrations

##### JSON Feed
- Internal code improvements.

Download

1.0.3 - R180529 (November 9, 2020)

Integrations

JSON Feed

Added the Traffic Light Protocol integration parameter.
Updated docker image to the latest version.

Download

1.1.38 - R5469292 (October 20, 2025)

Integrations

JSON Feed

Fixed an issue where some HTTP requests were not sent.

Related pull requests:
- 40535

Download

1.1.37 - 3980324 (June 26, 2025)

Integrations

JSON Feed

Fixed an issue where existing indicators were not fetched.

Related pull requests:
- 40280

Download

1.1.36 - R3474673 (May 20, 2025)

Integrations

JSON Feed

Metadata and documentation improvements.

Related pull requests:
- 39144

Download

1.1.35 - R2988527 (March 26, 2025)

Integrations

JSON Feed

Fixed an issue in the JSONFeedApiModule where an error was unnecessarily raised when no indicators were retrieved from the feed.

Related pull requests:
- 38459

Download

1.1.34 - 2148169 (February 5, 2025)

Integrations

JSON Feed

Enhanced the feed to mark indicators as enrichment excluded when the tlp color is red.

Related pull requests:
- 38308

Download

1.1.33 - R1741355 (December 3, 2024)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.114656.

Related pull requests:
- 37059
- 37052
- 37051

Download

1.1.32 - 1457639 (October 1, 2024)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.112434.

Related pull requests:
- 36445

Download

1.1.31 - R1455125 (October 1, 2024)

Integrations

JSON Feed

Enhanced JSONFeedApiModule to support setting indicator enrichment exclusion in select feeds. The change has no impact on this integration.

Related pull requests:
- 36004

Download

1.1.30 - 810472 (February 6, 2024)

Integrations

JSON Feed

Added the option to remove ports from IPv4 type indicators.
Updated the Docker image to: demisto/py3-tools:1.0.0.86899.

Related pull requests:
- 32223

Download

1.1.29 - 7122577 (December 10, 2023)

Integrations

JSON Feed

Fixed an issue where indicators were expiring due to prolonged periods of inactivity in the data source by implementing a solution that enforces a bi-daily update for existing indicators, even if the corresponding resource hasn't been updated.

Related pull requests:
- 31123

Download

1.1.28 - 5498982 (June 11, 2023)

Integrations

JSON Feed

Enhanced the JSONFeedApiModule to support fetching multiple indicator types in the AWS Feed integration. The change has no impact on this integration.

Related pull requests:
- 27141

Download

1.1.27 - R5170573 (May 2, 2023)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.47376.
Fixed an issue where in some cases the integration did not fetch any indicator due to memory leaks.
Fixed an issue with pylint error coming from xsoar-linter.

Related pull requests:
- 24410

Download

1.1.25 - 4444952 (January 22, 2023)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.44868.

Related pull requests:
- 23867

Download

1.1.24 - 4265201 (December 22, 2022)

Integrations

JSON Feed

Fixed an issue where an indicator did not have a tag.

Related pull requests:
- 23113

Download

1.1.23 - 4183367 (December 9, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.40638.

Related pull requests:
- 22844

Download

1.1.22 - 4092720 (November 23, 2022)

Integrations

JSON Feed

Fixed an issue where indicators with the same value but different tags were merged and the tags from only one indicator were retained.

Related pull requests:
- 22362

Download

1.1.21 - 4070054 (November 20, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.37427.

Related pull requests:
- 22352

Download

1.1.20 - R3990696 (November 7, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.36998.

Related pull requests:
- 22005

Download

1.1.19 - 3824820 (October 12, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.35208.

Related pull requests:
- 21672

Download

1.1.18 - 3639170 (September 11, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.33659.

Related pull requests:
- 21043

Download

1.1.17 - 3504083 (August 21, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.32758.

Related pull requests:
- 20644

Download

1.1.16 - 3238524 (July 10, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:1.0.0.31193.

Related pull requests:
- 19909

Download

1.1.15 - 3128765 (June 21, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.30715.

Related pull requests:
- 19656

Download

1.1.14 - 3056265 (June 8, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.30291.

Related pull requests:
- 19347

Download

1.1.13 - 2947173 (May 19, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.29493.

Download

1.1.12 - 2374411 (February 7, 2022)

Integrations

JSON Feed

Updated the Docker image to: demisto/py3-tools:0.0.1.26536.

Download

1.1.11 - 2316504 (January 27, 2022)

Integrations

JSON Feed

Fixed an issue where adding the headers If-None-Match and If-Modified-Since to requests was not compatible with Cortex XSOAR with a version below 6.5.0.
Updated the Docker image to: demisto/py3-tools:0.0.1.25751.

Download

1.1.9 - R2146019 (December 21, 2021)

Integrations

JSON Feed

Maintenance and stability enhancements.

Download

1.1.8 - 1882648 (November 2, 2021)

Integrations

JSON Feed

Enhanced noUpdate flagging when fetching indicators using ETAG and Last-Modified headers.

Download

1.1.7 - 7681620 (September 19, 2021)

Integrations

JSON Feed

Updated the Docker image to: demisto/jmespath:1.0.0.23980.

Download

1.1.6 - 415742 (August 24, 2021)

Integrations

JSON Feed

Fixed an issue where fetching indicators in Cortex XSOAR with a version below 6.5.0 would fail.

Download

1.1.5 - 411893 (August 16, 2021)

Integrations

JSON Feed

Read ETAG and Last-Modified headers from feed response to support noUpdate signaling when creating indicators.

Download

1.1.4 - 382285 (June 9, 2021)

Integrations

JSON Feed

Internal infrastructure improvements.

Download

1.1.3 - 346806 (May 5, 2021)

Integrations

JSON Feed

Breaking Change: The integration now validates that both configuration params: Indicator Type and Auto detect indicator type are not set. You may set only one of the configuration params at a time. Previously, if both were set, Auto detect indicator type was used and Indicator Type was silently ignored.
Added the Include indicator type for mapping configuration option. When using a custom classifier and mapper with this feed, use this option to include the indicator type in the raw json used for classification and mapping.

Download

1.1.2 - 334630 (April 24, 2021)

Integrations

JSON Feed

Added support for headers and POST data.
Updated Docker image to demisto/jmespath:1.0.0.19143.

Download

1.1.1 - R264879 (January 27, 2021)

Integrations

JSON Feed

Internal code improvements.

Download

1.1.0 - R261222 (January 25, 2021)

Integrations

##### JSON Feed
- Internal code improvements.

Download

1.0.3 - R180529 (November 9, 2020)

Integrations

JSON Feed

Added the Traffic Light Protocol integration parameter.
Updated docker image to the latest version.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	June 30, 2020
Last Release	October 20, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.