GoogleThreatIntelligenceDTMAlerts
This integration allows the creation of incidents based on DTM Alerts from Google Threat Intelligence.
Data Enrichment & Threat Intelligence · GoogleThreatIntelligence
Configuration parameters
credentials— (required)isFetch— Fetch incidentsmax_fetch— Max Fetchfirst_fetch— First Fetch Timemirror_direction— Mirroring Directionalert_type— Alert Typealert_monitor_ids— Alert Monitor IDalert_status— Alert Statusalert_severity— Alert Severityalert_tags— Alert Tagsalert_match_value— Alert Match Valuealert_mscore_gte— Alert mscorealert_search— Alert Searchproxy— Use system proxy settingsinsecure— Trust any certificate (not secure)incidentType— Incident type
Commands (3)
-
gti-dtm-alert-getGet a particular DTM Alert by ID.
-
gti-dtm-alert-listSearch the DTM Alerts with provided filter arguments.
-
gti-dtm-alert-status-updateUpdate the status of DTM alert.