ConcentricAI

Details

ID	`ConcentricAI`
Provider	Concentric AI
Category	Data Enrichment & Threat Intelligence
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

Concentric’s Semantic Intelligence™ solution discovers and protects business critical, unstructured data. We use deep learning to identify risky sharing, inappropriate third party access, assets in the wrong location, mis-classified documents, or lateral movement of data – all without rules or complex upfront configuration.

Configure ConcentricAI in Cortex

Parameter	Description	Required
Server URL		True
Minimum severity of alerts to fetch		True
Trust any certificate (not secure)		False
Use system proxy settings		False
Client ID		False
Client Secret		False
Domain		False
Maximum no. of incidents to fetch.	max -> 200	False
Incident type		False
Fetch incidents		False
First Fetch Time of Risks		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

concentricai-get-file-details

Get’s file information

Base Command

concentricai-get-file-details

Input

Argument Name	Description	Required
path	Path of the file.	Required
file-name	Name of File.	Required

Context Output

Path	Type	Description
ConcentricAI.FileInfo.risk_names	String	Risk names.
ConcentricAI.FileInfo.ownerDetails	String	owner Details.
ConcentricAI.FileInfo.pii	String	PII present in file or not
ConcentricAI.FileInfo.cid	String	File ID

concentricai-get-users-overview

Get overview of Users involved

Base Command

concentricai-get-users-overview

Input

Argument Name	Description	Required
max_users	Maximum no. of users fetched per category. Default is 50.	Optional

Context Output

There is no context output for this command.

concentricai-get-user-details

Get’s user details

Base Command

concentricai-get-user-details

Input

Argument Name	Description	Required
user	Enter user name.	Required

Context Output

There is no context output for this command.

concentricai-get-file-sharing-details

Get’s file sharing details

Base Command

concentricai-get-file-sharing-details

Input

Argument Name	Description	Required
cid	File ID.	Required

Context Output

Path	Type	Description
ConcentricAI.FileSharingInfo.type	Array	Sharing type.
ConcentricAI.FileSharingInfo.user_name	Array	User name.

Configuration parameters

url — Server URL (required)
min_severity — Minimum severity of alerts to fetch (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
client_id — Client ID
client_secret — Client Secret
domain — Domain
max_fetch — Maximum no. of incidents to fetch.
incidentType — Incident type
incidentFetchInterval — Incidents Fetch Interval
isFetch — Fetch incidents
first_fetch — First Fetch Time of Risks

Commands (4)

concentricai-get-file-details
Get's file information.
concentricai-get-file-sharing-details
Get's file sharing details.
concentricai-get-user-details
Get's user details.
concentricai-get-users-overview
Get overview of Users involved.

Source

ConcentricAI.py ConcentricAI_test.py ConcentricAI.yml ConcentricAI_description.md

Download History Raw

category: Data Enrichment & Threat Intelligence
sectionorder:
- Connect
- Collect
provider: Concentric AI
commonfields:
  id: ConcentricAI
  version: -1
configuration:
- display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- defaultvalue: low
  display: Minimum severity of alerts to fetch
  name: min_severity
  options:
  - low
  - medium
  - high
  required: true
  type: 15
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: Client ID
  name: client_id
  type: 0
  required: false
  section: Connect
- display: Client Secret
  name: client_secret
  type: 4
  required: false
  section: Connect
- display: Domain
  name: domain
  type: 0
  required: false
  section: Connect
- additionalinfo: max -> 200
  defaultvalue: '150'
  display: Maximum no. of incidents to fetch.
  name: max_fetch
  type: 0
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- defaultvalue: 1 day
  display: First Fetch Time of Risks
  name: first_fetch
  type: 0
  required: false
  section: Collect
description: Concentric’s Semantic Intelligence™ solution discovers and protects business critical, unstructured data. We use deep learning to identify risky sharing, inappropriate third party access, assets in the wrong location, mis-classified documents, or lateral movement of data – all without rules or complex upfront configuration.
display: ConcentricAI
name: ConcentricAI
script:
  commands:
  - arguments:
    - description: Path of the file.
      name: path
      required: true
    - description: Name of File.
      name: file-name
      required: true
    description: Get's file information.
    name: concentricai-get-file-details
    outputs:
    - contextPath: ConcentricAI.FileInfo.risk_names
      description: Risk names.
      type: String
    - contextPath: ConcentricAI.FileInfo.ownerDetails
      description: owner Details.
      type: String
    - contextPath: ConcentricAI.FileInfo.pii
      description: PII present in file or not.
      type: String
    - contextPath: ConcentricAI.FileInfo.cid
      description: File ID.
      type: String
  - arguments:
    - default: true
      defaultValue: '50'
      description: Maximum no. of users fetched per category.
      name: max_users
    description: Get overview of Users involved.
    name: concentricai-get-users-overview
  - arguments:
    - description: Enter user name.
      name: user
      required: true
    description: Get's user details.
    name: concentricai-get-user-details
  - arguments:
    - description: File ID.
      name: cid
      required: true
    description: Get's file sharing details.
    name: concentricai-get-file-sharing-details
    outputs:
    - contextPath: ConcentricAI.FileSharingInfo.type
      description: Sharing type.
      type: Array
    - contextPath: ConcentricAI.FileSharingInfo.user_name
      description: User name.
      type: Array
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
defaultmapperin: ConcentricAi-mapper
defaultclassifier: ConcentricAi
fromversion: 6.0.0