BreachRx

Automate your privacy Incident Response workflow through the BreachRx platform.

Case Management · BreachRx

Details

IDBreachRx
ProviderBreachRx
CategoryCase Management
From Version6.2.0
Docker Imagedemisto/graphql:1.0.0.10120494
Supported ModulesAgentix XSIAM

README

Automate your privacy Incident Response workflow through the BreachRx platform.
This integration was integrated and tested with version 1.20 of BreachRx

Configure BreachRx in Cortex

Parameter Description Required
Your BreachRx URL   True
GraphQL API URL   True
API Key The API Key to use for connection True
Secret Key The API Key to use for connection True
Use system proxy settings   False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

breachrx-incident-create


Create a privacy Incident on the BreachRx platform.

Base Command

breachrx-incident-create

Input

Argument Name Description Required
incident_name The name to use when creating the privacy Incident on the BreachRx platform. Optional
description A brief description to explain the privacy Incident on the BreachRx platform. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.description string The description of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

breachrx-incident-actions-get


Fetch all actions for a BreachRx privacy Incident.

Base Command

breachrx-incident-actions-get

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.Actions.id string The ID of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.name string The name of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.description string The description of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.user.email string The email of the assigned user of an Action on a BreachRx privacy Incident, if that Action is assigned to a user (null otherwise).

breachrx-incident-import


Link a BreachRx privacy Incident with an XSOAR Incident.

Base Command

breachrx-incident-import

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

breachrx-incident-get


Find a BreachRx privacy Incident on the connected BreachRx platform.

Base Command

breachrx-incident-get

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

Configuration parameters

  • url — Your BreachRx URL (required)
  • api_url — GraphQL API URL (required)
  • credentials — API Key (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (4)

  • breachrx-incident-actions-get

    Fetch all actions for a BreachRx privacy Incident.

  • breachrx-incident-create

    Create a privacy Incident on the BreachRx platform.

  • breachrx-incident-get

    Find a BreachRx privacy Incident on the connected BreachRx platform.

  • breachrx-incident-import

    Link a BreachRx privacy Incident with an XSOAR Incident.

category: Case Management
provider: BreachRx
commonfields:
  id: BreachRx
  version: -1
sectionorder:
- Connect
- Collect
configuration:
- defaultvalue: https://example.app.breachrx.io
  display: Your BreachRx URL
  name: url
  required: true
  type: 0
  section: Connect
- name: api_url
  display: GraphQL API URL
  required: true
  defaultvalue: https://graphql.app.breachrx.io
  type: 0
  section: Connect
- display: API Key
  displaypassword: Secret Key
  additionalinfo: The API credentials to use for connection
  name: credentials
  required: true
  type: 9
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
description: 'Automate your privacy Incident Response workflow through the BreachRx platform.'
display: BreachRx
name: BreachRx
script:
  commands:
  - name: breachrx-incident-create
    description: 'Create a privacy Incident on the BreachRx platform.'
    arguments:
    - name: incident_name
      description: 'The name to use when creating the privacy Incident on the BreachRx platform.'
    - name: description
      description: 'A brief description to explain the privacy Incident on the BreachRx platform.'
    outputs:
    - contextPath: BreachRx.Incident.id
      description: 'The ID of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.name
      description: 'The name of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.description
      description: 'The description of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.identifier
      description: 'The unique identifier of the privacy Incident on the BreachRx platform.'
      type: string
  - name: breachrx-incident-actions-get
    description: 'Fetch all actions for a BreachRx privacy Incident.'
    outputs:
    - contextPath: BreachRx.Incident.Actions.id
      description: 'The ID of an Action on a BreachRx privacy Incident.'
      type: string
    - contextPath: BreachRx.Incident.Actions.name
      description: 'The name of an Action on a BreachRx privacy Incident.'
      type: string
    - contextPath: BreachRx.Incident.Actions.description
      description: 'The description of an Action on a BreachRx privacy Incident.'
      type: string
    - contextPath: BreachRx.Incident.Actions.user.email
      description: 'The email of the assigned user of an Action on a BreachRx privacy Incident, if that Action is assigned to a user (null otherwise).'
      type: string
    arguments:
    - name: incident_name
      description: The name of the BreachRx incident to associate with this incident.
    - name: incident_identifier
      description: 'The unique identifier of the BreachRx incident to associate with this incident.'
  - name: breachrx-incident-import
    description: 'Link a BreachRx privacy Incident with an XSOAR Incident.'
    arguments:
    - name: incident_name
      description: The name of the BreachRx incident to associate with this incident.
    - name: incident_identifier
      description: 'The unique identifier of the BreachRx incident to associate with this incident.'
    outputs:
    - contextPath: BreachRx.Incident.id
      description: 'The ID of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.name
      description: 'The name of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.identifier
      description: 'The unique identifier of the privacy Incident on the BreachRx platform.'
      type: string
  - name: breachrx-incident-get
    description: 'Find a BreachRx privacy Incident on the connected BreachRx platform.'
    arguments:
    - name: incident_name
      description: The name of the BreachRx incident to associate with this incident.
    - name: incident_identifier
      description: 'The unique identifier of the BreachRx incident to associate with this incident.'
    outputs:
    - contextPath: BreachRx.Incident.id
      description: 'The ID of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.name
      description: 'The name of the privacy Incident on the BreachRx platform.'
      type: string
    - contextPath: BreachRx.Incident.identifier
      description: 'The unique identifier of the privacy Incident on the BreachRx platform.'
      type: string
  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/graphql:1.0.0.10120494
fromversion: 6.2.0
tests:
- No tests (auto formatted)