Cryptocurrency

Details

ID	`Cryptocurrency`
Provider	Open Source
Category	Data Enrichment & Threat Intelligence
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

Cryptocurrency will help classify Cryptocurrency indicators as suspicious when ingested.

Configure Cryptocurrency in Cortex

Parameter	Description	Required
reliability	Source Reliability	False
reputation	Reputation	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

crypto

Return Cryptocurrency reputation.

Base Command

crypto

Input

Argument Name	Description	Required
crypto	List of cryptocurrency addresses.	Optional
address_type	The cryptocurrency address type, if known. e.g. ‘bitcoin’. Possible values are: bitcoin.	Optional

Context Output

Path	Type	Description
DBotScore.Indicator	string	The indicator that was tested.
DBotScore.Score	number	The actual score.
DBotScore.Type	string	The indicator type.
DBotScore.Vendor	string	The vendor used to calculate the score.
Cryptocurrency.Address	string	The cryptocurrency address.
Cryptocurrency.AddressType	string	The cryptocurrency type. e.g. ‘bitcoin’.

Command Example

!crypto crypto=bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i

Context Example

{
    "Cryptocurrency": {
        "Address": "bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i",
        "AddressType": "bitcoin"
    },
    "DBotScore": {
        "Indicator": "bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i",
        "Reliability": "B - Usually reliable",
        "Score": 2,
        "Type": "cryptocurrency",
        "Vendor": "Cryptocurrency"
    }
}

Human Readable Output

Cryptocurrency reputation for bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i

Address Cryptocurrency Address Type Reputation

bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i bitcoin Suspicious

Address	Cryptocurrency Address Type	Reputation
bitcoin:1AGNa15ZQXAZUgFiqJ2i7Z2DPU2J6hW62i	bitcoin	Suspicious

Configuration parameters

reliability — Source Reliability
reputation — Reputation

Commands (1)

crypto
Return Cryptocurrency reputation.

Source

Cryptocurrency.py Cryptocurrency_test.py Cryptocurrency.yml Cryptocurrency_description.md command_examples.txt

Download History Raw

category: Data Enrichment & Threat Intelligence
provider: Open Source
sectionorder:
- Connect
- Collect
commonfields:
  id: Cryptocurrency
  version: -1
configuration:
- additionalinfo: Reliability of the source providing the intelligence data. Default is B - Usually reliable.
  defaultvalue: B - Usually reliable
  display: Source Reliability
  name: reliability
  options:
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  type: 15
  section: Collect
  advanced: true
  required: false
- additionalinfo: Reputation for the Cryptocurrency indicators. Default is Suspicious.
  defaultvalue: Suspicious
  display: Reputation
  name: reputation
  options:
  - None
  - Good
  - Suspicious
  - Bad
  type: 15
  section: Collect
  advanced: true
  required: false
description: Cryptocurrency will help classify Cryptocurrency indicators with the configured score when ingested.
display: Cryptocurrency
name: Cryptocurrency
script:
  commands:
  - name: crypto
    arguments:
    - name: crypto
      default: true
      description: List of cryptocurrency addresses.
      isArray: true
    - name: address_type
      description: The cryptocurrency address type, if known. e.g. 'bitcoin'.
      auto: PREDEFINED
      predefined:
      - bitcoin
    outputs:
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: string
    - contextPath: DBotScore.Score
      description: The actual score.
      type: number
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: string
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: string
    - contextPath: Cryptocurrency.Address
      description: The cryptocurrency address.
      type: string
    - contextPath: Cryptocurrency.AddressType
      description: The cryptocurrency type. e.g. 'bitcoin'.
      type: string
    description: Return Cryptocurrency reputation.
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
tests:
- Cryptocurrency-Test