DeepInstinct v3

Deep Instinct is a prevention-first approach to stopping ransomware and other malware using the world's first purpose-built, deep learning cybersecurity framework.

Endpoint · DeepInstinct

Configuration parameters

  • base_url — Base server URL (required)
  • apikey — API Key (required)
  • first_fetch — First event ID to fetch from
  • max_fetch — Maximum number of indicators per fetch, max is 1000.
  • isFetch — Fetch incidents
  • incidentFetchInterval — Incidents Fetch Interval
  • incidentType — Incident type
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (21)

  • deepinstinctv3-add-devices-to-group

    Add multiple devices to a group.

  • deepinstinctv3-add-hash-to-allow-list

    Add file hash to Allow List.

  • deepinstinctv3-add-hash-to-deny-list

    Add file hash to Deny List.

  • deepinstinctv3-close-events

    Close list of events.

  • deepinstinctv3-delete-files-remotely

    Delete multiple files remotely.

  • deepinstinctv3-disable-device

    Disable device at next check-in.

  • deepinstinctv3-enable-device

    Enable device at next check-in.

  • deepinstinctv3-get-all-groups

    Get all groups.

  • deepinstinctv3-get-all-policies

    Get list of all policies.

  • deepinstinctv3-get-device

    Get device information from its ID.

  • deepinstinctv3-get-events

    Get all events after given event ID.

  • deepinstinctv3-get-suspicious-events

    Get all suspicious events after given event ID.

  • deepinstinctv3-isolate-from-network

    Isolate device(s) from Network.

  • deepinstinctv3-release-from-isolation

    Release device(s) from isolation.

  • deepinstinctv3-remote-file-upload

    Upload file associated with given event id at next check-in.

  • deepinstinctv3-remove-device

    Remove agent from device at next check-in.

  • deepinstinctv3-remove-devices-from-group

    Remove list of devices from groups.

  • deepinstinctv3-remove-hash-from-allow-list

    Remove hash from Allow List.

  • deepinstinctv3-remove-hash-from-deny-list

    Remove hash from Deny List.

  • deepinstinctv3-terminate-processes

    Terminate list of processes.

  • deepinstinctv3-upload-logs

    Upload device logs from given device at next check-in.