# Reyhford Threat Intelligence

## Docs

- [Get Indicator](https://docs.reyhford.com/api-reference/indicators/get.md): Retrieve a single threat indicator by ID.
- [Search Indicators](https://docs.reyhford.com/api-reference/indicators/search.md): Search threat indicators with filters for protocol, confidence, sensor type, and time range.
- [List Collections](https://docs.reyhford.com/api-reference/taxii/collections.md): List available TAXII 2.1 collections on the Reyhford server.
- [TAXII Discovery](https://docs.reyhford.com/api-reference/taxii/discovery.md): Discover Reyhford TAXII 2.1 server capabilities and API roots.
- [Get Objects](https://docs.reyhford.com/api-reference/taxii/objects.md): Retrieve STIX 2.1 indicator bundles from a TAXII collection.
- [Authentication](https://docs.reyhford.com/authentication.md): Authenticate to the Reyhford API with API keys or WorkOS JWT.
- [IBM QRadar Integration](https://docs.reyhford.com/guides/qradar-integration.md): Connect QRadar to the Reyhford TAXII 2.1 threat intelligence feed.
- [Microsoft Sentinel Integration](https://docs.reyhford.com/guides/sentinel-integration.md): Import Reyhford threat intelligence into Microsoft Sentinel via TAXII 2.1.
- [Splunk Integration](https://docs.reyhford.com/guides/splunk-integration.md): Ingest Reyhford STIX indicators into Splunk Enterprise Security via TAXII 2.1.
- [Introduction](https://docs.reyhford.com/introduction.md): Reyhford global ICS/OT threat intelligence — TAXII 2.1 feed and REST indicators API.
- [Quickstart](https://docs.reyhford.com/quickstart.md): Pull your first STIX indicators from the Reyhford TAXII 2.1 feed in minutes.

## OpenAPI Specs

- [taxii.openapi](https://docs.reyhford.com/api/overlays/taxii.openapi.yaml)
- [openapi](https://docs.reyhford.com/api/openapi.yaml)
- [rest.openapi](https://docs.reyhford.com/api/generated/rest.openapi.json)