ConcentricAI

Details

ID	`ConcentricAI`
Provider	Concentric AI
Category	Data Enrichment & Threat Intelligence
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

Concentric’s Semantic Intelligence™ solution discovers and protects business critical, unstructured data. We use deep learning to identify risky sharing, inappropriate third party access, assets in the wrong location, mis-classified documents, or lateral movement of data – all without rules or complex upfront configuration.

Configure ConcentricAI in Cortex

Parameter	Description	Required
Server URL		True
Minimum severity of alerts to fetch		True
Trust any certificate (not secure)		False
Use system proxy settings		False
Client ID		False
Client Secret		False
Domain		False
Maximum no. of incidents to fetch.	max -> 200	False
Incident type		False
Fetch incidents		False
First Fetch Time of Risks		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

concentricai-get-file-details

Get’s file information

Base Command

concentricai-get-file-details

Input

Argument Name	Description	Required
path	Path of the file.	Required
file-name	Name of File.	Required

Context Output

Path	Type	Description
ConcentricAI.FileInfo.risk_names	String	Risk names.
ConcentricAI.FileInfo.ownerDetails	String	owner Details.
ConcentricAI.FileInfo.pii	String	PII present in file or not
ConcentricAI.FileInfo.cid	String	File ID

concentricai-get-users-overview

Get overview of Users involved

Base Command

concentricai-get-users-overview

Input

Argument Name	Description	Required
max_users	Maximum no. of users fetched per category. Default is 50.	Optional

Context Output

There is no context output for this command.

concentricai-get-user-details

Get’s user details

Base Command

concentricai-get-user-details

Input

Argument Name	Description	Required
user	Enter user name.	Required

Context Output

There is no context output for this command.

concentricai-get-file-sharing-details

Get’s file sharing details

Base Command

concentricai-get-file-sharing-details

Input

Argument Name	Description	Required
cid	File ID.	Required

Context Output

Path	Type	Description
ConcentricAI.FileSharingInfo.type	Array	Sharing type.
ConcentricAI.FileSharingInfo.user_name	Array	User name.

Configuration parameters

url — Server URL (required)
min_severity — Minimum severity of alerts to fetch (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
client_id — Client ID
client_secret — Client Secret
domain — Domain
max_fetch — Maximum no. of incidents to fetch.
incidentType — Incident type
incidentFetchInterval — Incidents Fetch Interval
isFetch — Fetch incidents
first_fetch — First Fetch Time of Risks

Commands (4)

concentricai-get-file-details
Get's file information.
concentricai-get-file-sharing-details
Get's file sharing details.
concentricai-get-user-details
Get's user details.
concentricai-get-users-overview
Get overview of Users involved.

Source

ConcentricAI.py ConcentricAI_test.py ConcentricAI.yml ConcentricAI_description.md

Download History Raw

## Concentric AI
- This Plugin enables Cortex XSOAR to fetch alerts from ConcentricAI.
- To configure the following Plugin, you need client_id, client_secret, domain and the url connectivity.
- To enable Demisto plugin , please acquire client_id and client_secret credentials for your account & domain from the ConcentricAI team.
- Concentric’s Semantic Intelligence™ solution discovers and protects business critical, unstructured data. We use deep learning to identify risky sharing, inappropriate third party access, assets in the wrong location, mis-classified documents, or lateral movement of data – all without rules or complex upfront configuration.