MS-ISAC

This API queries alerts and alert data from the MS-ISAC API to enrich and query alerts from the platform.

Utilities · MS-ISAC

Configuration parameters

  • apikey — (required)
  • url — Server URL (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • incidentType — Incident type
  • isFetch — Fetch incidents
  • incidentFetchInterval — Incidents Fetch Interval
  • first_fetch — First Fetch Time

Commands (4)

  • msisac-get-alert

    Retrieve alert data by its ID.

  • msisac-get-event Deprecated

    Retrieve alert data by its ID.

  • msisac-retrieve-cases

    Retrieves a list of MS-ISAC cases since the given timestamp. If no timestamp is given, command will return cases from the last 72 hours.

  • msisac-retrieve-events Deprecated

    Retrieves a list of MS-ISAC events for a given number of days (one or greater).