Create-Mock-Feed-Relationships

Mock Feed.

Data Enrichment & Threat Intelligence · Developer Tools · Feed

Details

ID	`Create-Mock-Feed-Relationships`
Provider	Open Source
Category	Data Enrichment & Threat Intelligence
From Version	6.0.0
Docker Image	`demisto/feed-performance-test:1.0.10133006`
Supported Modules	Agentix XSIAM

Configuration parameters

indicator_type — Indicator Type (required)
amount_indicators — Amount of indicators
feedIncremental — Incremental Feed
indicators_custom_field_length — Indicators custom field length
amount_relationships — Amount of relationships per indicator
relationship_description_length — Relationship description length
batch_size — Size of batches
feedFetchInterval — Feed Fetch Interval
feed — Fetch indicators
incidents_name — Incidents name
fieldnames — Fieldnames (CSV)
feedExpirationInterval —
feedReputation — Indicator Reputation
feedReliability — Source Reliability (required)
feedExpirationPolicy —
feedBypassExclusionList — Bypass exclusion list
feedTags — Tags
tlp_color — Traffic Light Protocol Color

Commands (0)

This integration defines no commands.

Source

CreateMockFeed.py CreateMockFeed.yml

Download History Raw

commonfields:
  id: Create-Mock-Feed-Relationships
  version: -1
fromversion: 6.0.0
name: Create-Mock-Feed-Relationships
display: Create-Mock-Feed-Relationships
category: Data Enrichment & Threat Intelligence
provider: Open Source
description: Mock Feed.
configuration:
- display: Indicator Type
  name: indicator_type
  type: 16
  required: true
  options:
  - Domain
  - File
  - IP
  - URL
- display: Amount of indicators
  name: amount_indicators
  defaultvalue: '100000'
  type: 0
  required: false
- display: Incremental Feed
  defaultvalue: 'true'
  hidden: true
  name: feedIncremental
  type: 8
  required: false
- display: Indicators custom field length
  name: indicators_custom_field_length
  defaultvalue: '200'
  type: 0
  required: false
- display: Amount of relationships per indicator
  name: amount_relationships
  defaultvalue: '1'
  type: 0
  required: false
- display: Relationship description length
  name: relationship_description_length
  defaultvalue: '1'
  type: 0
  required: false
- display: Size of batches
  name: batch_size
  defaultvalue: '30000'
  type: 0
  required: false
- display: Feed Fetch Interval
  name: feedFetchInterval
  type: 19
  required: false
- display: Fetch indicators
  name: feed
  defaultvalue: 'true'
  type: 8
  required: false
- display: Incidents name
  name: incidents_name
  type: 0
  required: false
- display: Fieldnames (CSV)
  name: fieldnames
  defaultvalue: indicator,description,date
  type: 0
  additionalinfo: Make sure to have the key "indicator" in the appropriate CSV column where the value of the indicator is expected to be
  required: false
- display: ''
  name: feedExpirationInterval
  type: 1
  required: false
- display: Indicator Reputation
  name: feedReputation
  type: 18
  options:
  - None
  - Good
  - Suspicious
  - Bad
  additionalinfo: Indicators from this integration instance will be marked with this reputation
  required: false
- display: Source Reliability
  name: feedReliability
  type: 15
  required: true
  options:
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  additionalinfo: Reliability of the source providing the intelligence data
- display: ''
  name: feedExpirationPolicy
  type: 17
  options:
  - never
  - interval
  - indicatorType
  required: false
- display: Bypass exclusion list
  name: feedBypassExclusionList
  type: 8
  additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system.
  required: false
- display: Tags
  name: feedTags
  type: 0
  additionalinfo: Supports CSV values.
  required: false
- display: Traffic Light Protocol Color
  name: tlp_color
  type: 15
  options:
  - RED
  - AMBER
  - GREEN
  - WHITE
  additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed
  required: false
script:
  script: ''
  type: python
  dockerimage: demisto/feed-performance-test:1.0.10133006
  feed: true
  subtype: python3
tests:
- No test