BreachRx

Automate your privacy Incident Response workflow through the BreachRx platform.

Case Management · BreachRx

Details

IDBreachRx
ProviderBreachRx
CategoryCase Management
From Version6.2.0
Docker Imagedemisto/graphql:1.0.0.10120494
Supported ModulesAgentix XSIAM

README

Automate your privacy Incident Response workflow through the BreachRx platform.
This integration was integrated and tested with version 1.20 of BreachRx

Configure BreachRx in Cortex

Parameter Description Required
Your BreachRx URL   True
GraphQL API URL   True
API Key The API Key to use for connection True
Secret Key The API Key to use for connection True
Use system proxy settings   False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

breachrx-incident-create

Create a privacy Incident on the BreachRx platform.

Base Command

breachrx-incident-create

Input

Argument Name Description Required
incident_name The name to use when creating the privacy Incident on the BreachRx platform. Optional
description A brief description to explain the privacy Incident on the BreachRx platform. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.description string The description of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

breachrx-incident-actions-get

Fetch all actions for a BreachRx privacy Incident.

Base Command

breachrx-incident-actions-get

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.Actions.id string The ID of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.name string The name of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.description string The description of an Action on a BreachRx privacy Incident.
BreachRx.Incident.Actions.user.email string The email of the assigned user of an Action on a BreachRx privacy Incident, if that Action is assigned to a user (null otherwise).

breachrx-incident-import

Link a BreachRx privacy Incident with an XSOAR Incident.

Base Command

breachrx-incident-import

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

breachrx-incident-get

Find a BreachRx privacy Incident on the connected BreachRx platform.

Base Command

breachrx-incident-get

Input

Argument Name Description Required
incident_name The name of the BreachRx incident to associate with this incident. Optional
incident_identifier The unique identifier of the BreachRx incident to associate with this incident. Optional

Context Output

Path Type Description
BreachRx.Incident.id string The ID of the privacy Incident on the BreachRx platform.
BreachRx.Incident.name string The name of the privacy Incident on the BreachRx platform.
BreachRx.Incident.identifier string The unique identifier of the privacy Incident on the BreachRx platform.

Configuration parameters

  • url — Your BreachRx URL (required)
  • api_url — GraphQL API URL (required)
  • credentials — API Key (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (4)

  • breachrx-incident-actions-get

    Fetch all actions for a BreachRx privacy Incident.

  • breachrx-incident-create

    Create a privacy Incident on the BreachRx platform.

  • breachrx-incident-get

    Find a BreachRx privacy Incident on the connected BreachRx platform.

  • breachrx-incident-import

    Link a BreachRx privacy Incident with an XSOAR Incident.

Source

BreachRx.py BreachRx_test.py BreachRx.yml BreachRx_description.md command_examples.txt
Download History Raw 
## BreachRx Help
To obtain your BreachRx API key, you must be logged in as admin:

1. Click "API Keys" in the left navigation menu, under "Admin".
2. Click "New" in the upper right of the page.
3. Copy *both* the API Key and Secret Key.

The "BreachRx URL" is the URL you use to view the site (e.g. https://company.app.breachrx.io), and should be specific to your organization.  Please only copy the domain name.

Only change the GraphQL API URL if you know what you're doing.