Asimily Insight

Details

ID	`Asimily Insight`
Provider	Asimily
Category	Network Security
From Version	6.10.0
Docker Image	`demisto/python3:3.12.13.10116658`

README

Integrate Asimily Insight to ingest security anomalies, CVEs, and leverage detailed asset data for streamlined incident investigation.

Asimily Insight delivers comprehensive IoT/OT security and management by providing deep asset visibility, automated vulnerability prioritization, and actionable mitigation strategies aligned with MITRE ATT&CK. It analyzes device communication, calculates holistic risk scores, and enables targeted network segmentation. The platform detects anomalies, simplifies policy management, and automates forensic packet capture. Beyond security, Asimily optimizes asset utilization, tracks operational usage, and manages configuration drift. Its Risk Simulator improves efficiency, and centralized data streamlines IT/OT convergence while identifying unmanaged devices.

This integration utilizes the Asimily Insight RESTful APIs to provide seamless access to comprehensive device data. Users can retrieve detailed information on IT, medical, and security parameters, as well as view known vulnerabilities (CVEs), detect asset anomalies, and maintain synchronized data—either on a regular schedule or on demand.

What does this pack do?

On-Demand Asset Retrieval: Query Asimily Insight for detailed device information using search parameters, such as IP address, MAC address, facility, or device ID.
Anomaly Alert Synchronization: Regularly sync alerts generated by Asimily Insight to ensure up-to-date visibility into device-related security and operational events.
Vulnerability (CVE) Synchronization: Periodically retrieve and update known device vulnerabilities detected by Asimily Insight to support informed risk management and mitigation.
Incident Creation in Cortex XSOAR: All synced data—whether alerts, or vulnerabilities is automatically converted into incidents within the Cortex XSOAR platform for streamlined investigation and response workflows. Asset info can be automatically queried and stored by using Playbook to call the asimily-get-asset-details command.

Configure Asimily Insight on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services.
Search for Asimily Insight.

Click Add instance to create and configure a new integration instance.

Parameter	Description	Required/Default	Type
Name	XSOAR Integration Instance Name	True	String
Asimily Portal URL	This will be in the following format: `https://customer-portal.asimily.com`.	True	String
API User Name	The Asimily Insight API username	True	String
Password	The password of the Asimily Insight API user	True	String
Trust any certificate (not secure)		Default False	Boolean
Use system proxy settings		Default False	Boolean
Device Family Filter for Fetch Operation	Fetch incidents only for assets with selected device families in fetch-incidents	“All”	Multi-Select
Device Tags Filter for Fetch Operation	Fetch incidents only for assets with selected device tags in fetch-incidents	“All”	Multi-Select
Fetch Anomaly Alerts	If fetch anomalies incidents in fetch-incidents	Default False	Boolean
Fetch Anomaly Criticality	Fetch anomaly incidents only for anomalies with selected criticality	“High Only”	Single-Select
Fetch Device CVEs	If fetch CVEs incidents in fetch-incidents	Default False	Boolean
Fetch CVE Score	Fetch CVEs incidents only for CVEs with selected scores	“High Only”	Single-Select
Incidents Fetch Interval	The default 5-minute fetch interval can be adjusted based on observed fetch duration to optimize data freshness and system load.	5	Number
Fetches incidents	If Fetch incidents	False	Boolean

Click Test to validate the URL, API username, API password and connection.

Resetting the “Last Run” Timestamp

If you modify any of the fetch filters (Fetch Anomaly Alerts, Fetch Device CVEs, Device Family Filter, Device Tags Filter, Fetch Anomaly Criticality, Fetch CVE Score), this means there may be new devices included to fetch incidents or there will be new incidents included for existing devices. It is strongly recommended to Reset the “last run” timestamp.

To reset:

Go to the integration instance configuration.
Navigate to Collect > Advanced Settings.
Click Reset the “last run” timestamp.
Click Reset Now.

This ensures that incidents related to newly included devices and updated filters are correctly fetched.

Reset Fetch Incident Last Run Timestamp

Configure Pre-Process Rules

The integration pulls in assets information, anomaly alerts, CVEs from Asimily Insight based on its updates or upon query, creating the need for a preprocessing rule that drops the incoming incident if it’s a duplication.

Follow the guidelines below to configure the preprocessing rule.

Navigate to Settings > Object Setup > Incidents > Pre-Process Rules.
Click +New Rule on the top right corner.
Name the rule appropriately (e.g. Asimily Incident Dedup).
In the Conditions for Incoming Incident section, enter:
- Type - Includes - Asimily
In the Action section, select Run a script.
In the Choose a script section, pick from the drop-down list:
- PreProcessAsimilyDedup

The configuration of the preprocessing rule is optional, but highly recommended to avoid duplication.

Pre-process Rule

The integration includes a preprocessing script (PreProcessAsimilyDedup) that will drop the incoming incident if it’s a duplicate. It will search all past incidents with all status.

Alternative rule settings can be:

In the Action section, select Drop and update.
In the Update section, enter
- Link to - Oldest incident - Created within the last - Your desired timeframe
- DbotMirrorId - Is identical (Incoming Incident) - to incoming incident

Commands

You can run these commands from the Cortex XSOAR CLI, as part of an automation, or within a playbook.
Upon successful execution, a DBot message will appear in the War Room with execution details.
If asset data, anomaly alerts, or CVE information is retrieved, corresponding incidents will be automatically created with appropriate incident types.

asimily-get-asset-details

Fetch assets details from Asimily Insight. You can add argument filters.

Base Command

asimily-get-asset-details

Input

Argument	Description	Required	Support List
mac_addr	The MAC Address of Asimily Asset	Optional	No
ip_addr	The IP Address of Asimily Asset	Optional	No
facility	The Facility of Asimily Asset	Optional	No
asimily_device_id	Asimily Insight given ID for devices	Optional	No
limit	Maximum amount of items to fetch.	Optional	No

Context Output

Fetched ${fetch_limit} out of ${device_count} assets matching search. Asset fetch count is limited to avoid server overload.

Path	Type	Description
AsimilyInsight.Asset.asimilydeviceid	number	Asimily Device ID
AsimilyInsight.Asset.asimilydeviceipv4address	unknown	Asimily Device IP Address
AsimilyInsight.Asset.asimilydevicemacaddress	string	Asimily Device MAC Address
AsimilyInsight.Asset.asimilydeviceipv6address	unknown	Asimily Device IPV6 Address
AsimilyInsight.Asset.asimilydevicemanufacturer	string	Asimily Device Manufacturer
AsimilyInsight.Asset.asimilydevicemodel	string	Asimily Device Model
AsimilyInsight.Asset.asimilydeviceos	string	Asimily Device OS
AsimilyInsight.Asset.asimilydeviceosversion	string	Asimily Device OS Version
AsimilyInsight.Asset.asimilydevicetype	string	Asimily Device Type
AsimilyInsight.Asset.asimilydevicefamilies	unknown	Asimily Device Families
AsimilyInsight.Asset.asimilydeviceserialnumber	string	Asimily Device Serial Number
AsimilyInsight.Asset.asimilydevicedepartment	string	Asimily Device Department
AsimilyInsight.Asset.asimilydevicefacility	string	Asimily Device Facility
AsimilyInsight.Asset.asimilydevicehardwarearchitecture	string	Asimily Device Hardware Architecture
AsimilyInsight.Asset.asimilydevicehostname	string	Asimily Device Host Name
AsimilyInsight.Asset.asimilydevicelocation	string	Asimily Device Location
AsimilyInsight.Asset.asimilydeviceregion	string	Asimily Device Region
AsimilyInsight.Asset.asimilydevicesoftwareverison	string	Asimily Device Software Verison
AsimilyInsight.Asset.asimilydeviceifstoreephi	boolean	Asimily Device If Store Ephi
AsimilyInsight.Asset.asimilydeviceiftransmitephi	boolean	Asimily Device If Transmit Ephi
AsimilyInsight.Asset.asimilydeviceriskscore	number	Asimily Device Risk Score
AsimilyInsight.Asset.asimilydevicelikelihood	number	Asimily Device Likelihood
AsimilyInsight.Asset.asimilydeviceimpact	number	Asimily Device Impact
AsimilyInsight.Asset.asimilydeviceaverageutilizationpercent	number	Asimily Device Average Utilization Percent
AsimilyInsight.Asset.asimilydeviceuptime	number	Asimily Device Up Time
AsimilyInsight.Asset.asimilydeviceisconnected	boolean	Asimily Device Is Connected
AsimilyInsight.Asset.asimilydeviceiscurrentlyinuse	boolean	Asimily Device Is Currently In Use
AsimilyInsight.Asset.asimilydeviceisnetworkingdevice	boolean	‘Asimily Device Is Networking Device ‘
AsimilyInsight.Asset.asimilydeviceiswireless	boolean	Asimily Device Is Wireless
AsimilyInsight.Asset.asimilydeviceclass	string	Asimily Device Class
AsimilyInsight.Asset.asimilydevicemanagedby	string	Asimily Device Managed By
AsimilyInsight.Asset.asimilydeviceanomalypresent	boolean	Asimily Device Anomaly Present
AsimilyInsight.Asset.asimilydevicemds2	string	Asimily Device MDS2
AsimilyInsight.Asset.asimilydevicecmmsid	string	Asimily Device CMMS ID
AsimilyInsight.Asset.asimilydevicelastdiscoveredtime	date	Asimily Device Last Discovered Time
AsimilyInsight.Asset.asimilydevicetag	unknown	Asimily Device Tag
AsimilyInsight.Asset.asimilydevicemasterfamily	string	Asimily Device Master Family
AsimilyInsight.Asset.asimilydevicediscoverysource	string	Asimily Device Discovery Source
AsimilyInsight.Asset.asimilydeviceapplications	unknown	Asimily Device Applications
AsimilyInsight.Asset.asimilydeviceurl	string	Asimily Device URL
AsimilyInsight.Asset.asimilydeviceifusingendpointsecurity	boolean	Asimily Device If Using Endpoint Security

asimily-get-asset-anomalies

Fetch anomaly alerts from Asimily Insight. You can add argument filters.

Base Command

asimily-get-asset-anomalies

Input

Argument Name	Description	Required	Support List
mac_addr	The MAC Address of Asimily Asset	Optional	No
ip_addr	The IP Address of Asimily Asset	Optional	No
asimily_device_id	Asimily Insight given ID for devices	Optional	No
device_family		Optional	Yes
device_tag		Optional	Yes
criticality	Anomaly Alert Criticality Filter. Options: High Only, Medium and High, All	Optional	No
limit	Maximum amount of items to fetch. (Fetch will stop after device anomalies reached the limit)	Optional	No

Context Output

Fetched ${fetch_count} anomalies for ${fetch_device_count} devices matching search.
${pending_device_count} devices matching search is not fetched. Fetch count is limited to avoid server overload.

Path	Type	Description
AsimilyInsight.Anomaly.asimilyanomalyname	string	Asimily Anomaly Name
AsimilyInsight.Anomaly.asimilyanomalycriticality	string	Asimily Anomaly Criticality
AsimilyInsight.Anomaly.asimilyanomalyearliesttriggertime	date	Asimily Anomaly Earliest Trigger Time
AsimilyInsight.Anomaly.asimilyanomalylasttriggertime	date	Asimily Anomaly Last Trigger Time
AsimilyInsight.Anomaly.asimilyanomalyalertid	string	Asimily Anomaly Alert ID
AsimilyInsight.Anomaly.asimilyanomalyurls	unknown	Asimily Anomaly URLs
AsimilyInsight.Anomaly.asimilyanomalyisfixed	boolean	Asimily Anomaly Is Fixed
AsimilyInsight.Anomaly.asimilyanomalyfixby	string	Asimily Anomaly Fix By
AsimilyInsight.Anomaly.asimilyanomalycriticalityscore	number	Asimily Anomaly Criticality Score
AsimilyInsight.Anomaly.asimilyanomalymitretactic	string	Asimily Anomaly Mitre Tactic
AsimilyInsight.Anomaly.asimilyanomalymitretechnique	string	Asimily Anomaly Mitre Technique
AsimilyInsight.Anomaly.asimilyanomalycategory	string	Asimily Anomaly Category
AsimilyInsight.Anomaly.asimilyanomalydescription	string	Asimily Anomaly Description
AsimilyInsight.Anomaly.asimilyanomalycustomeranomalyid	string	Asimily Anomaly Customer Anomaly ID. Unique anomaly type identifier assigned by Asimily for a specific customer. This ID can be used in future operations such as invoking anomaly fix actions.
AsimilyInsight.Anomaly.asimilydeviceid	number	Asimily Device ID
AsimilyInsight.Anomaly.asimilydevicemacaddress	string	Asimily Device MAC Address
AsimilyInsight.Anomaly.asimilydeviceipv4address	string	Asimily Device IPV4 Address
AsimilyInsight.Anomaly.asimilydevicehostname	string	Asimily Device Host Name
AsimilyInsight.Anomaly.asimilydevicetype	string	Asimily Device Type
AsimilyInsight.Anomaly.asimilydevicemodel	string	Asimily Device Model
AsimilyInsight.Anomaly.asimilydeviceos	string	Asimily Device OS
AsimilyInsight.Anomaly.asimilydevicemanufacturer	string	Asimily Device Manufacturer
AsimilyInsight.Anomaly.asimilydevicefamilies	unknown	Asimily Device Families

asimily-get-asset-vulnerabilities

Fetch device CVEs from Asimily Insight. You can add argument filters.

Base Command

asimily-get-asset-vulnerabilities

Input

Argument Name	Description	Required	Support List
mac_addr	The MAC Address of Asimily Asset	Optional	No
ip_addr	The IP Address of Asimily Asset	Optional	No
asimily_device_id	Asimily Insight given ID for devices	Optional	No
device_family		Optional	Yes
device_tag		Optional	Yes
cve_score	CVE Score Filter. Options: High Only, Medium and High, All (Score limit: High=7.5, Medium=3.5)	Optional	No
limit	Maximum amount of items to fetch. (Fetch will stop after device CVEs reached the limit)	Optional	No

Context Output

Fetched ${fetch_count} CVEs for ${fetch_device_count} devices matching search.
${pending_device_count} devices matching search is not fetched. Fetch count is limited to avoid server overload.

Path	Type	Description
AsimilyInsight.CVE.asimilycvename	string	Asimily CVE Name
AsimilyInsight.CVE.asimilycvecwetype	string	Asimily CVE CWE Type
AsimilyInsight.CVE.asimilycveentitytype	string	Asimily CVE Entity Type
AsimilyInsight.CVE.asimilycveentityname	string	Asimily CVE Entity Name
AsimilyInsight.CVE.asimilycvescore	number	Asimily CVE Score
AsimilyInsight.CVE.asimilycvecvss3basescore	number	Asimily CVE CVSS 3 Base Score
AsimilyInsight.CVE.asimilycvedescripttion	string	Asimily CVE Descripttion
AsimilyInsight.CVE.asimilycveisfixed	boolean	Asimily CVE Is Fixed
AsimilyInsight.CVE.asimilycvefixedby	string	Asimily CVE Fixed By
AsimilyInsight.CVE.asimilycveoempatched	boolean	Asimily CVE OEM Patched
AsimilyInsight.CVE.asimilycveismuted	boolean	Asimily CVE Is Muted
AsimilyInsight.CVE.asimilycveexploitableinwild	boolean	Asimily CVE Exploitable In Wild
AsimilyInsight.CVE.asimilycvepublisheddate	date	Asimily CVE Published Date
AsimilyInsight.CVE.asimilycveopendate	date	Asimily CVE Open Date
AsimilyInsight.CVE.asimilycvefixeddate	date	Asimily CVE Fixed Date
AsimilyInsight.CVE.asimilydeviceid	number	Asimily Device ID
AsimilyInsight.CVE.asimilydevicemacaddress	string	Asimily Device MAC Address
AsimilyInsight.CVE.asimilydeviceipv4address	string	Asimily Device IPV4 Address
AsimilyInsight.CVE.asimilydevicehostname	string	Asimily Device Host Name
AsimilyInsight.CVE.asimilydevicetype	string	Asimily Device Type
AsimilyInsight.CVE.asimilydevicemodel	string	Asimily Device Model
AsimilyInsight.CVE.asimilydeviceos	string	Asimily Device OS
AsimilyInsight.CVE.asimilydevicemanufacturer	string	Asimily Device Manufacturer
AsimilyInsight.CVE.asimilydevicefamilies	string	Asimily Device Families

Additional Information

Incident Search

System searchable fields: macaddress, devicelocalip, devicemodel, hostnames, deviceid
Asimily Insight Custom searchable fields: asimilyanomalyname, asimilycvename

Incident Name

For Asimily Anomaly incident, name will be anomalyname|hostname|ip|mac
For Asimily CVE incident, name will be cvename|hostname|ip|mac

Incident Criticality Mapping

XSOAR incidents have 4 levels of criticality:
- Informational (0)
- Low (1)
- Medium (2)
- High (3)
- Critical (4)
Asimily Anomaly Alerts have 3 levels of criticality (Low/Medium/High). When creating incidents, we populate the incident criticality using the respective anomaly alert criticality.
Asimily Asset CVEs have Asimily Calculated CVE score (Range: 0-10). When creating incidents, we populate the incident criticality using the respective CVE scores.
- Low (CVE score: < 3.5)
- Medium (CVE score: < 7.5)
- High (CVE score: < 10)

Default Playbook

To enrich incidents with corresponding asset information, we’ve published a default playbook for two custom incident types. This playbook calls asimily-get-asset-details to retrieve asset information and stores it in Context Data (under Asimily > Asset).

We’ve also added a section to custom incident layouts to display this information.

Users can modify this playbook or create similar ones. We recommend using the device ID or MAC address as a unique identifier when querying asset details.

Configuration parameters

url — Asimily Portal URL (required)
asimilycred — API User Name (required)
isFetch — Fetch incidents
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
fetchonlydevicefamilies — Device Family Filter for Fetch Operation (required)
fetchonlydevicetags — Device Tags Filter for Fetch Operation (required)
iffetchanomalies — Fetch Anomaly Alerts
fetchanomalycriticality — Fetch Anomaly Criticality (required)
iffetchcves — Fetch Device CVEs
fetchcvescore — Fetch CVE Score (required)
incidentFetchInterval — Incidents Fetch Interval
max_fetch — Max Incidents
first_fetch — First Fetch Time Interval
incidentType — Incident type

Commands (3)

asimily-get-asset-anomalies
Fetch Asimily Anomalies.
asimily-get-asset-details
Fetch Asimily Asset information.
asimily-get-asset-vulnerabilities
Fetch Asimily CVEs.

Source

AsimilyInsight.py AsimilyInsight_test.py AsimilyInsight.yml AsimilyInsight_description.md command_examples.txt

Download History Raw

category: Network Security
provider: Asimily
commonfields:
  id: Asimily Insight
  version: -1
sectionorder:
- Connect
- Collect
configuration:
- additionalinfo: 'This will be in the following format: https://customer-portal.asimily.com.'
  display: Asimily Portal URL
  name: url
  required: true
  section: Connect
  type: 0
- additionalinfo: The Asimily user account for API access.
  display: API User Name
  displaypassword: Password
  name: asimilycred
  required: true
  section: Connect
  type: 9
- display: Fetch incidents
  name: isFetch
  required: false
  section: Collect
  type: 8
- defaultvalue: "false"
  display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
- defaultvalue: "false"
  display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
- additionalinfo: Fetch incidents only for devices with the device families selected
  defaultvalue: Medical Devices
  display: Device Family Filter for Fetch Operation
  name: fetchonlydevicefamilies
  section: Collect
  options:
  - Imaging Devices
  - Medical Devices
  - Servers
  - Workstations
  - Networking Devices
  - IT Systems
  - Mobile Devices
  - Laboratory Devices
  - IoT Devices
  - OT Devices
  - All
  required: true
  type: 16
- additionalinfo: Fetch incidents only for devices with the tags selected
  defaultvalue: All
  display: Device Tags Filter for Fetch Operation
  name: fetchonlydevicetags
  section: Collect
  options:
  - All
  required: true
  type: 16
- defaultvalue: "false"
  display: Fetch Anomaly Alerts
  name: iffetchanomalies
  section: Collect
  required: false
  type: 8
- defaultvalue: High Only
  display: Fetch Anomaly Criticality
  name: fetchanomalycriticality
  section: Collect
  options:
  - High Only
  - Medium and High
  - All
  required: true
  type: 15
- defaultvalue: "false"
  display: Fetch Device CVEs
  name: iffetchcves
  section: Collect
  required: false
  type: 8
- defaultvalue: High Only
  display: Fetch CVE Score
  name: fetchcvescore
  section: Collect
  options:
  - High Only
  - Medium and High
  - All
  required: true
  type: 15
- defaultvalue: "5"
  display: Incidents Fetch Interval
  name: incidentFetchInterval
  section: Collect
  required: false
  type: 19
- name: max_fetch
  display: Max Incidents
  defaultvalue: 200
  hidden: true
  type: 0
  section: Collect
  additionalinfo: The maximum number of incidents to fetch each time.
  required: false
- name: first_fetch
  display: First Fetch Time Interval
  hidden: true
  type: 0
  section: Collect
  advanced: true
  additionalinfo: The time range to consider for the initial data fetch in the format <number> <unit>. Not used by Asimily Insight Integeration.
  defaultvalue: 10 minutes
  required: false
- display: Incident type
  name: incidentType
  section: Collect
  required: false
  type: 13
description: Integrate Asimily Insight to ingest security anomalies, CVEs, and leverage detailed asset data for streamlined incident investigation.
display: Asimily Insight
name: Asimily Insight
defaultclassifier: Asimily_Insight - Classifier
defaultmapperin: Asimily_Insight - Incoming Mapper
script:
  commands:
  - arguments:
    - description: The MAC Address of Asimily Asset.
      name: mac_addr
    - description: The IP Address of Asimily Asset.
      name: ip_addr
    - description: The Facility of Asimily Asset.
      name: facility
    - description: The device ID of Asimily asset.
      name: asimily_device_id
    - defaultValue: "100"
      description: Maximum amount of items to fetch.
      name: limit
    description: Fetch Asimily Asset information.
    name: asimily-get-asset-details
    outputs:
    - contextPath: AsimilyInsight.Asset.asimilydeviceid
      description: Asimily Device ID.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydeviceipv4address
      description: Asimily Device IP Address.
      type: unknown
    - contextPath: AsimilyInsight.Asset.asimilydevicemacaddress
      description: Asimily Device MAC Address.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceipv6address
      description: Asimily Device IPV6 Address.
      type: unknown
    - contextPath: AsimilyInsight.Asset.asimilydevicemanufacturer
      description: Asimily Device Manufacturer.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicemodel
      description: Asimily Device Model.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceos
      description: Asimily Device OS.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceosversion
      description: Asimily Device OS Version.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicetype
      description: Asimily Device Type.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicefamilies
      description: Asimily Device Families.
      type: unknown
    - contextPath: AsimilyInsight.Asset.asimilydeviceserialnumber
      description: Asimily Device Serial Number.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicedepartment
      description: Asimily Device Department.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicefacility
      description: Asimily Device Facility.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicehardwarearchitecture
      description: Asimily Device Hardware Architecture.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicehostname
      description: Asimily Device Host Name.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicelocation
      description: Asimily Device Location.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceregion
      description: Asimily Device Region.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicesoftwareverison
      description: Asimily Device Software Verison.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceifstoreephi
      description: Asimily Device If Store Ephi.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceiftransmitephi
      description: Asimily Device If Transmit Ephi.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceriskscore
      description: Asimily Device Risk Score.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydevicelikelihood
      description: Asimily Device Likelihood.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydeviceimpact
      description: Asimily Device Impact.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydeviceaverageutilizationpercent
      description: Asimily Device Average Utilization Percent.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydeviceuptime
      description: Asimily Device Up Time.
      type: number
    - contextPath: AsimilyInsight.Asset.asimilydeviceisconnected
      description: Asimily Device Is Connected.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceiscurrentlyinuse
      description: Asimily Device Is Currently In Use.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceisnetworkingdevice
      description: 'Asimily Device Is Networking Device.'
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceiswireless
      description: Asimily Device Is Wireless.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydeviceclass
      description: Asimily Device Class.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicemanagedby
      description: Asimily Device Managed By.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceanomalypresent
      description: Asimily Device Anomaly Present.
      type: boolean
    - contextPath: AsimilyInsight.Asset.asimilydevicemds2
      description: Asimily Device MDS2.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicecmmsid
      description: Asimily Device CMMS ID.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicelastdiscoveredtime
      description: Asimily Device Last Discovered Time.
      type: date
    - contextPath: AsimilyInsight.Asset.asimilydevicetag
      description: Asimily Device Tag.
      type: unknown
    - contextPath: AsimilyInsight.Asset.asimilydevicemasterfamily
      description: Asimily Device Master Family.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydevicediscoverysource
      description: Asimily Device Discovery Source.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceapplications
      description: Asimily Device Applications.
      type: unknown
    - contextPath: AsimilyInsight.Asset.asimilydeviceurl
      description: Asimily Device URL.
      type: string
    - contextPath: AsimilyInsight.Asset.asimilydeviceifusingendpointsecurity
      description: Asimily Device If Using Endpoint Security.
      type: boolean
  - arguments:
    - description: The MAC Address of Asimily Asset.
      name: mac_addr
    - description: The IP Address of Asimily Asset.
      name: ip_addr
    - description: Query only Asimily Assets with these tags.
      isArray: true
      name: device_tag
    - auto: PREDEFINED
      description: Query only Asimily Assets with these device families.
      isArray: true
      name: device_family
      predefined:
      - All
      - Imaging Devices
      - Medical Devices
      - Servers
      - Workstations
      - Networking Devices
      - IT Systems
      - Mobile Devices
      - Laboratory Devices
      - IoT Devices
      - OT Devices
    - auto: PREDEFINED
      description: The Asimily assigned criticality level of anomalies.
      name: criticality
      predefined:
      - All
      - High Only
      - Medium and High
    - description: The device ID of Asimily asset.
      name: asimily_device_id
    - defaultValue: "1000"
      description: Maximum amount of items to fetch.
      name: limit
    description: Fetch Asimily Anomalies.
    name: asimily-get-asset-anomalies
    outputs:
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyname
      description: Asimily Anomaly Name.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalycriticality
      description: Asimily Anomaly Criticality.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyearliesttriggertime
      description: Asimily Anomaly Earliest Trigger Time.
      type: date
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalylasttriggertime
      description: Asimily Anomaly Last Trigger Time.
      type: date
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyalertid
      description: Asimily Anomaly Alert ID.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyurls
      description: Asimily Anomaly URLs.
      type: unknown
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyisfixed
      description: Asimily Anomaly Is Fixed.
      type: boolean
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalyfixby
      description: Asimily Anomaly Fix By.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalycriticalityscore
      description: Asimily Anomaly Criticality Score.
      type: number
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalymitretactic
      description: Asimily Anomaly Mitre Tactic.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalymitretechnique
      description: Asimily Anomaly Mitre Technique.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalycategory
      description: Asimily Anomaly Category.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalydescription
      description: Asimily Anomaly Description.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilyanomalycustomeranomalyid
      description: Asimily Anomaly Customer Anomaly ID. Unique anomaly type identifier assigned by Asimily for a specific customer. This ID can be used in future operations such as invoking anomaly fix actions.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydeviceid
      description: Asimily Device ID.
      type: number
    - contextPath: AsimilyInsight.Anomaly.asimilydevicemacaddress
      description: Asimily Device MAC Address.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydeviceipv4address
      description: Asimily Device IPV4 Address.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydevicehostname
      description: Asimily Device Host Name.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydevicetype
      description: Asimily Device Type.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydevicemodel
      description: Asimily Device Model.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydeviceos
      description: Asimily Device OS.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydevicemanufacturer
      description: Asimily Device Manufacturer.
      type: string
    - contextPath: AsimilyInsight.Anomaly.asimilydevicefamilies
      description: Asimily Device Families.
      type: unknown
  - arguments:
    - description: The MAC Address of Asimily Asset.
      name: mac_addr
    - description: The IP Address of Asimily Asset.
      name: ip_addr
    - description: Query only Asimily Assets with these tags.
      isArray: true
      name: device_tag
    - auto: PREDEFINED
      description: Query only Asimily Assets with these device families.
      isArray: true
      name: device_family
      predefined:
      - All
      - Imaging Devices
      - Medical Devices
      - Servers
      - Workstations
      - Networking Devices
      - IT Systems
      - Mobile Devices
      - Laboratory Devices
      - IoT Devices
      - OT Devices
    - auto: PREDEFINED
      description: 'The Asimily assigned criticality level of CVEs based on CVE scores. Options include: Low(<3.5), Medium(<7.5), High(>=7.5).'
      name: cve_score
      predefined:
      - All
      - High Only
      - Medium and High
    - description: The device ID of Asimily asset.
      name: asimily_device_id
    - defaultValue: "1000"
      description: 'Maximum amount of items to fetch. '
      name: limit
    description: Fetch Asimily CVEs.
    name: asimily-get-asset-vulnerabilities
    outputs:
    - contextPath: AsimilyInsight.CVE.asimilycvename
      description: Asimily CVE Name.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycvecwetype
      description: Asimily CVE CWE Type.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycveentitytype
      description: Asimily CVE Entity Type.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycveentityname
      description: Asimily CVE Entity Name.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycvescore
      description: Asimily CVE Score.
      type: number
    - contextPath: AsimilyInsight.CVE.asimilycvecvss3basescore
      description: Asimily CVE CVSS 3 Base Score.
      type: number
    - contextPath: AsimilyInsight.CVE.asimilycvedescripttion
      description: Asimily CVE Descripttion.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycveisfixed
      description: Asimily CVE Is Fixed.
      type: boolean
    - contextPath: AsimilyInsight.CVE.asimilycvefixedby
      description: Asimily CVE Fixed By.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilycveoempatched
      description: Asimily CVE OEM Patched.
      type: boolean
    - contextPath: AsimilyInsight.CVE.asimilycveismuted
      description: Asimily CVE Is Muted.
      type: boolean
    - contextPath: AsimilyInsight.CVE.asimilycveexploitableinwild
      description: Asimily CVE Exploitable In Wild.
      type: boolean
    - contextPath: AsimilyInsight.CVE.asimilycvepublisheddate
      description: Asimily CVE Published Date.
      type: date
    - contextPath: AsimilyInsight.CVE.asimilycveopendate
      description: Asimily CVE Open Date.
      type: date
    - contextPath: AsimilyInsight.CVE.asimilycvefixeddate
      description: Asimily CVE Fixed Date.
      type: date
    - contextPath: AsimilyInsight.CVE.asimilydeviceid
      description: Asimily Device ID.
      type: number
    - contextPath: AsimilyInsight.CVE.asimilydevicemacaddress
      description: Asimily Device MAC Address.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydeviceipv4address
      description: Asimily Device IPV4 Address.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydevicehostname
      description: Asimily Device Host Name.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydevicetype
      description: Asimily Device Type.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydevicemodel
      description: Asimily Device Model.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydeviceos
      description: Asimily Device OS.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydevicemanufacturer
      description: Asimily Device Manufacturer.
      type: string
    - contextPath: AsimilyInsight.CVE.asimilydevicefamilies
      description: Asimily Device Families.
      type: unknown
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  ismappable: false
  longRunning: false
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: '6.10.0'
tests:
- No tests (auto formatted)