CybleEvents

Cyble Events for Vision Users. Must have Vision API access to use the threat intelligence.

Data Enrichment & Threat Intelligence · Cyble Events (Deprecated)

Configuration parameters

  • url — URL (required)
  • token — Access Token (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • isFetch — Fetch incidents
  • incidentFetchInterval — Incidents Fetch Interval
  • max_fetch — Incident Fetch Limit (required)
  • incidentType — Incident type
  • priority — Priority

Commands (3)

  • cyble-vision-fetch-alerts

    Fetch Incident event alerts based on the given parameters. Alerts would have multiple events grouped into one based on specific service type. So user would see in few cases more events than the limit provided.

  • cyble-vision-fetch-event-detail

    Fetch Incident detail based on event type and event ID.

  • cyble-vision-fetch-iocs

    Fetch the indicators for the given timeline.