Exodus Intelligence Vulnerabilities

Exodus Intelligence.

Data Enrichment & Threat Intelligence · Exodus Intelligence EVE Platform · Feed

Details

ID	`Exodus Intelligence Vulnerabilities`
Provider	Exodus Intelligence
Category	Data Enrichment & Threat Intelligence
From Version	6.2.0
Docker Image	`demisto/exodusintelligence:1.0.0.9067966`
Supported Modules	Agentix XSIAM

README

Built on original research from some of the best reverse engineers in the world as well as cutting edge machine learning technology, Exodus Intelligence’s EVE platform provides deep intelligence about the latest vulnerabilities.

This integration allows Cortex XSOAR users to add context regarding the nature of vulnerabilities and their likelihood to be exploited in the wild, identify platforms on which given vulnerabilities exist and have been verified to be exploitable, update incidents with specific mitigation guidance, and much more.

exodus-reset-data-stream

Reset data stream to X numbers of days in the past.

Base Command

exodus-reset-data-stream

Input

Argument Name	Description	Required
reset	The number of days to reset the data stream.	Required

Context Output

Path	Type	Description
ExodusVulnerabilityEnrichment.ResetDataStream.end_ts	String	New date data stream is set to.

Configuration parameters

email — Email Address (required)
password — Password (required)
url — URL of the Exodus server
client_encryption_key — Client encryption key for access to extended report data
incidentFetchInterval — Incidents Fetch Interval
feed — Fetch indicators
feedReputation — Indicator Reputation
feedReliability — Source Reliability (required)
feedExpirationPolicy —
feedExpirationInterval —
feedFetchInterval — Feed Fetch Interval
feedBypassExclusionList — Bypass exclusion list
min_xi_score — Minimum XI Score
max_xi_score — Maximum XI Score
feedTags — Tags
tlp_color — Traffic Light Protocol Color

Commands (2)

exodus-get-indicators
Retrieve the latest vulnerabilities from Exodus Intelligence
exodus-reset-data-stream
Reset data stream to X numbers of days in the past.

Source

ExodusVulnerabilityEnrichment.py ExodusVulnerabilityEnrichment_test.py ExodusVulnerabilityEnrichment.yml ExodusVulnerabilityEnrichment_description.md command_examples.txt

Download History Raw

category: Data Enrichment & Threat Intelligence
provider: Exodus Intelligence
commonfields:
  id: Exodus Intelligence Vulnerabilities
  version: -1
configuration:
- additionalinfo: Exodus Intelligence Email.
  display: Email Address
  name: email
  required: true
  type: 0
- additionalinfo: Exodus Intelligence password.
  display: Password
  name: password
  required: true
  type: 4
- defaultvalue: https://vpx.exodusintel.com
  display: URL of the Exodus server
  name: url
  type: 0
  required: false
- defaultvalue: None
  display: Client encryption key for access to extended report data
  name: client_encryption_key
  type: 4
  required: false
- defaultvalue: '240'
  display: Incidents Fetch Interval
  name: incidentFetchInterval
  type: 19
  required: false
- display: Fetch indicators
  name: feed
  type: 8
  defaultvalue: 'true'
  required: false
- display: Indicator Reputation
  type: 18
  options:
  - None
  - Good
  - Suspicious
  - Bad
  additionalinfo: Indicators from this integration instance will be marked with this reputation
  name: feedReputation
  required: false
- additionalinfo: Reliability of the source providing the intelligence data
  defaultvalue: A - Completely reliable
  display: Source Reliability
  name: feedReliability
  options:
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: true
  type: 15
- defaultvalue: indicatorType
  display: ''
  name: feedExpirationPolicy
  options:
  - never
  - interval
  - indicatorType
  - suddenDeath
  type: 17
  required: false
- defaultvalue: '20160'
  display: ''
  name: feedExpirationInterval
  type: 1
  required: false
- defaultvalue: '240'
  display: Feed Fetch Interval
  name: feedFetchInterval
  type: 19
  required: false
- additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system.
  defaultvalue: 'true'
  display: Bypass exclusion list
  name: feedBypassExclusionList
  type: 8
  required: false
- display: Minimum XI Score
  name: min_xi_score
  type: 0
  required: false
- display: Maximum XI Score
  name: max_xi_score
  type: 0
  required: false
- name: feedTags
  display: Tags
  type: 0
  additionalinfo: Supports CSV values.
  required: false
- name: tlp_color
  display: Traffic Light Protocol Color
  options:
  - RED
  - AMBER
  - GREEN
  - WHITE
  type: 15
  additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed
  required: false
description: Exodus Intelligence.
display: Exodus Intelligence Vulnerabilities
name: Exodus Intelligence Vulnerabilities
script:
  commands:
  - arguments: []
    description: Retrieve the latest vulnerabilities from Exodus Intelligence
    name: exodus-get-indicators
  - arguments:
    - description: The number of days to reset the data stream.
      name: reset
      required: true
    description: Reset data stream to X numbers of days in the past.
    name: exodus-reset-data-stream
    outputs:
    - contextPath: ExodusVulnerabilityEnrichment.ResetDataStream.end_ts
      description: New date data stream is set to.
      type: String
  dockerimage: demisto/exodusintelligence:1.0.0.9067966
  feed: true
  isFetchSamples: true
  runonce: true
  script: ''
  subtype: python3
  type: python
fromversion: 6.2.0
tests:
- No tests (auto formatted)