Exodus Intelligence Vulnerabilities

Details

ID	`Exodus Intelligence Vulnerabilities`
Provider	Exodus Intelligence
Category	Data Enrichment & Threat Intelligence
From Version	6.2.0
Docker Image	`demisto/exodusintelligence:1.0.0.9067966`
Supported Modules	Agentix XSIAM

README

Built on original research from some of the best reverse engineers in the world as well as cutting edge machine learning technology, Exodus Intelligence’s EVE platform provides deep intelligence about the latest vulnerabilities.

This integration allows Cortex XSOAR users to add context regarding the nature of vulnerabilities and their likelihood to be exploited in the wild, identify platforms on which given vulnerabilities exist and have been verified to be exploitable, update incidents with specific mitigation guidance, and much more.

exodus-reset-data-stream

Reset data stream to X numbers of days in the past.

Base Command

exodus-reset-data-stream

Input

Argument Name	Description	Required
reset	The number of days to reset the data stream.	Required

Context Output

Path	Type	Description
ExodusVulnerabilityEnrichment.ResetDataStream.end_ts	String	New date data stream is set to.

Configuration parameters

email — Email Address (required)
password — Password (required)
url — URL of the Exodus server
client_encryption_key — Client encryption key for access to extended report data
incidentFetchInterval — Incidents Fetch Interval
feed — Fetch indicators
feedReputation — Indicator Reputation
feedReliability — Source Reliability (required)
feedExpirationPolicy —
feedExpirationInterval —
feedFetchInterval — Feed Fetch Interval
feedBypassExclusionList — Bypass exclusion list
min_xi_score — Minimum XI Score
max_xi_score — Maximum XI Score
feedTags — Tags
tlp_color — Traffic Light Protocol Color

Commands (2)

exodus-get-indicators
Retrieve the latest vulnerabilities from Exodus Intelligence
exodus-reset-data-stream
Reset data stream to X numbers of days in the past.

Source

ExodusVulnerabilityEnrichment.py ExodusVulnerabilityEnrichment_test.py ExodusVulnerabilityEnrichment.yml ExodusVulnerabilityEnrichment_description.md command_examples.txt

Download History Raw

## Help

The EVE integration allows you to retrieve vulnerabilities using the Exodus Intelligence API. A new indicator of type Exodus Intelligence will be created for each vulnerability retrieved.

Please note that an Exodus Intelligence account is necessary to access the API. Please visit https://vpx.exodusintel.com and create an account.

## Required fields:
- Email
- Password
- API Key 

## Optional fields:
- Min XI Score
- Max XI Score

## Available Commands:
!fetch-indicator: Runs the integration
!reset-data-stream: Reset the integration data stream to a later date. Ie: `!reset-data-stream reset=100` will reset the data stream 100 days in the past.