Cisco Umbrella Cloud Security Deprecated

Deprecated. Use Cisco Umbrella Cloud Security v2 instead.

Network Security · Cisco Umbrella cloud security

Details

IDCisco Umbrella Cloud Security
ProviderCisco Systems
CategoryNetwork Security
From Version6.0.0
Docker Imagedemisto/python3:3.12.11.4508456
Supported ModulesAgentix XSIAM

README

This integration was integrated and tested with version 1.0 of Cisco Umbrella Cloud Security.

Configure Cisco Umbrella Cloud Security in Cortex

Parameter Required
Organization ID True
API Key True
API Secret False
Trust any certificate (not secure) False
Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

umbrella-get-destination-lists

Get’s all destination lists in organization

Base Command

umbrella-get-destination-lists

Input

Argument Name Description Required
orgId Organization ID. Optional

Context Output

Path Type Description
Umbrella.DestinationLists Unknown  

umbrella-add-domain

Adds domains to given destination list

Base Command

umbrella-add-domain

Input

Argument Name Description Required
orgId Optional organization ID. If not provided, will use the one provided in the integration configuration. Optional
destId Destination list ID. Required
domains List of domains to add to destination list (Format: domain1.com,domain2.com). Required
comment Note on what the domain is or why it is being added. Default is Added from XSOAR. Optional

Context Output

There is no context output for this command.

umbrella-get-destination-domains

Get’s the domains listed in a destination list

Base Command

umbrella-get-destination-domains

Input

Argument Name Description Required
orgId Optional orgId, by default uses the one set in the instance configuration. Optional
destId Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID. Required

Context Output

Path Type Description
Umbrella.Destinations.createdAt Unknown When the domain within destination list was created
Umbrella.Destinations.type Unknown Type of destination within destination list
Umbrella.Destinations.destination Unknown Domain within destination list
Umbrella.Destinations.id Unknown ID of domain within destination list
Umbrella.Destinations.comment Unknown Comment associated with domain within destination list

umbrella-remove-domain

Removes domains to given destination list

Base Command

umbrella-remove-domain

Input

Argument Name Description Required
orgId Optional organization ID. If not provided, will use the one provided in the integration configuration. Optional
destId Destination list ID. Required
domainIds List of entry IDs to remove from destination list (Format: 1234,1235). Required

Context Output

There is no context output for this command.

umbrella-get-destination-domain

Gets the domain from a destination list

Base Command

umbrella-get-destination-domain

Input

Argument Name Description Required
orgId Optional orgId, by default uses the one set in the instance configuration. Optional
destId Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID. Required

Context Output

Path Type Description
Umbrella.Destinations.createdAt Unknown When the domain within destination list was created
Umbrella.Destinations.type Unknown Type of destination within destination list
Umbrella.Destinations.destination Unknown Domain within destination list
Umbrella.Destinations.id Unknown ID of domain within destination list
Umbrella.Destinations.comment Unknown Comment associated with domain within destination list

umbrella-search-destination-domains

Search for multiple domains in a destination list

Base Command

umbrella-search-destination-domains

Input

Argument Name Description Required
orgId Optional orgId, by default uses the one set in the instance configuration. Optional
destId Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID. Required
domains Domains to search for in a destination list. Required

Context Output

Path Type Description
Umbrella.Destinations.createdAt date When the domain within destination list was created
Umbrella.Destinations.type string Type of destination within destination list
Umbrella.Destinations.destination string Domain within destination list
Umbrella.Destinations.id number ID of domain within destination list
Umbrella.Destinations.comment string Comment associated with domain within destination list

Configuration parameters

  • orgId — Organization ID (required)
  • apiKey — API Key (required)
  • apiSecret — API Secret
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (6)

  • umbrella-add-domain

    Deprecated. Use the `umbrella-destination-add` instead.

  • umbrella-get-destination-domain

    Deprecated. Use the `umbrella-destinations-list` instead.

  • umbrella-get-destination-domains

    Deprecated. Use the `umbrella-destinations-list` instead.

  • umbrella-get-destination-lists

    Deprecated. Use the `umbrella-destination-lists-list` instead.

  • umbrella-remove-domain

    Deprecated. Use the `umbrella-destination-delete` instead.

  • umbrella-search-destination-domains

    Deprecated. Use the `umbrella-destinations-list` instead.

Source

Cisco-umbrella-cloud-security.py Cisco-umbrella-cloud-security.yml Cisco-umbrella-cloud-security_description.md
Download History Raw 
category: Network Security
provider: Cisco Systems
commonfields:
  id: Cisco Umbrella Cloud Security
  version: -1
configuration:
- display: Organization ID
  name: orgId
  required: true
  type: 0
- display: API Key
  name: apiKey
  required: true
  type: 4
- display: API Secret
  name: apiSecret
  type: 4
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Deprecated. Use Cisco Umbrella Cloud Security v2 instead.
display: Cisco Umbrella Cloud Security (Deprecated)
name: Cisco Umbrella Cloud Security
deprecated: true
script:
  commands:
  - arguments:
    - description: Organization ID
      name: orgId
    description: Deprecated. Use the `umbrella-destination-lists-list` instead.
    name: umbrella-get-destination-lists
    outputs:
    - contextPath: Umbrella.DestinationLists
      description: List of destination lists in organization
      type: Unknown
  - arguments:
    - description: Optional organization ID. If not provided, will use the one provided in the integration configuration
      name: orgId
    - description: Destination list ID
      name: destId
      required: true
    - description: 'List of domains to add to destination list (Format: domain1.com,domain2.com)'
      isArray: true
      name: domains
      required: true
    - defaultValue: Added from XSOAR
      description: Note on what the domain is or why it is being added
      name: comment
    description: Deprecated. Use the `umbrella-destination-add` instead.
    name: umbrella-add-domain
  - arguments:
    - description: Optional orgId, by default uses the one set in the instance configuration
      name: orgId
    - description: Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID
      name: destId
      required: true
    description: Deprecated. Use the `umbrella-destinations-list` instead.
    name: umbrella-get-destination-domains
    outputs:
    - contextPath: Umbrella.Destinations.id
      description: ID of domain within destination list
    - contextPath: Umbrella.Destinations.destination
      description: Domain within destination list
    - contextPath: Umbrella.Destinations.type
      description: Type of destination within destination list
    - contextPath: Umbrella.Destinations.createdAt
      description: When the domain within destination list was created
    - contextPath: Umbrella.Destinations.comment
      description: Comment associated with domain within destination list
  - arguments:
    - description: Optional organization ID. If not provided, will use the one provided in the integration configuration.
      name: orgId
    - description: Destination list ID
      name: destId
      required: true
    - description: 'List of entry IDs to remove from destination list (Format: 1234,1235)'
      isArray: true
      name: domainIds
      required: true
    description: Deprecated. Use the `umbrella-destination-delete` instead.
    name: umbrella-remove-domain
  - arguments:
    - description: Optional orgId, by default uses the one set in the instance configuration
      name: orgId
    - description: Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID
      name: destId
      required: true
    - description: Domain to get from a destination list
      name: domain
      required: true
    description: Deprecated. Use the `umbrella-destinations-list` instead.
    name: umbrella-get-destination-domain
    outputs:
    - contextPath: Umbrella.Destinations.id
      description: ID of domain within destination list
    - contextPath: Umbrella.Destinations.destination
      description: Domain within destination list
    - contextPath: Umbrella.Destinations.type
      description: Type of destination within destination list
    - contextPath: Umbrella.Destinations.createdAt
      description: When the domain within destination list was created
    - contextPath: Umbrella.Destinations.comment
      description: Comment associated with domain within destination list
  - arguments:
    - description: Optional orgId, by default uses the one set in the instance configuration
      name: orgId
    - description: Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID
      name: destId
      required: true
    - description: Domains to search for in a destination list
      isArray: true
      name: domains
      required: true
    description: Deprecated. Use the `umbrella-destinations-list` instead.
    name: umbrella-search-destination-domains
    outputs:
    - contextPath: Umbrella.Destinations.id
      description: ID of domain within destination list
      type: number
    - contextPath: Umbrella.Destinations.destination
      description: Domain within destination list
      type: string
    - contextPath: Umbrella.Destinations.type
      description: Type of destination within destination list
      type: string
    - contextPath: Umbrella.Destinations.createdAt
      description: When the domain within destination list was created
      type: date
    - contextPath: Umbrella.Destinations.comment
      description: Comment associated with the domain in the destination list.
      type: string
  dockerimage: demisto/python3:3.12.11.4508456
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)