ACTI Intelligence Report

Accenture CTI v2

Details

IDACTI Intelligence Report
From Version6.0.0
Reputation Commandacti-getThreatIntelReport
Format ScriptFormatACTIURL
Context PathIAIR(val.value && val.value===obj.value)
LayoutACTI Intelligence Report

Detection Regex

https://intelgraph.idefense.com/#/node/intelligence_report/view/\w{8}-\w{4}-\w{4}-\w{4}-\w{12}

Manual Mapping (18)

Indicator Field Source Path
abstract IAIR.summary
actiabstract IAIR.summary
actianalysis IAIR.analysis
acticonclusion IAIR.conclusion
actiindextimestamp IAIR.index_timestamp
actilastmodified IAIR.last_modified
actilastpublished IAIR.last_published
actireporttitle ## ${IAIR.display_text}
actithreattypes IAIR.threat_types
actiuuid IAIR.uuid
analysis IAIR.analysis
conclusion IAIR.conclusion
creationdate IAIR.created_on
indextimestamp IAIR.index_timestamp
lastmodified IAIR.last_modified
lastpublished IAIR.last_published
reporttitle ## ${IAIR.display_text}
uuid IAIR.uuid
{
	"id": "ACTI Intelligence Report",
	"version": -1,
	"fromVersion": "6.0.0",
	"modified": "2022-03-07T11:46:11.902020111Z",
	"commitMessage": "",
	"shouldCommit": false,
	"regex": "https://intelgraph.idefense.com/#/node/intelligence_report/view/\\w{8}-\\w{4}-\\w{4}-\\w{4}-\\w{12}",
	"details": "ACTI Intelligence Report",
	"prevDetails": "ACTI Intelligence Report",
	"legacyNames": null,
	"reputationScriptName": "",
	"reputationCommand": "acti-getThreatIntelReport",
	"enhancementScriptNames": [],
	"system": false,
	"locked": false,
	"disabled": false,
	"file": false,
	"updateAfter": 0,
	"mergeContext": false,
	"formatScript": "FormatACTIURL",
	"contextPath": "IAIR(val.value \u0026\u0026 val.value===obj.value)",
	"contextValue": "value",
	"excludedBrands": [],
	"defaultMapping": null,
	"manualMapping": {
		"abstract": {
			"simple": "IAIR.summary"
		},
		"actiabstract": {
			"simple": "IAIR.summary"
		},
		"actianalysis": {
			"simple": "IAIR.analysis"
		},
		"acticonclusion": {
			"simple": "IAIR.conclusion"
		},
		"actiindextimestamp": {
			"simple": "IAIR.index_timestamp"
		},
		"actilastmodified": {
			"simple": "IAIR.last_modified"
		},
		"actilastpublished": {
			"simple": "IAIR.last_published"
		},
		"actireporttitle": {
			"simple": "## ${IAIR.display_text}"
		},
		"actithreattypes": {
			"simple": "IAIR.threat_types"
		},
		"actiuuid": {
			"simple": "IAIR.uuid"
		},
		"analysis": {
			"simple": "IAIR.analysis"
		},
		"conclusion": {
			"simple": "IAIR.conclusion"
		},
		"creationdate": {
			"simple": "IAIR.created_on"
		},
		"indextimestamp": {
			"simple": "IAIR.index_timestamp"
		},
		"lastmodified": {
			"simple": "IAIR.last_modified"
		},
		"lastpublished": {
			"simple": "IAIR.last_published"
		},
		"reporttitle": {
			"simple": "## ${IAIR.display_text}"
		},
		"uuid": {
			"simple": "IAIR.uuid"
		}
	},
	"fileHashesPriority": null,
	"expiration": 0,
	"layout": "ACTI Intelligence Report"
}