Salesforce Indicators

Pull any Salesforce Object as an indicator.

Data Enrichment & Threat Intelligence · Salesforce Indicators · Feed

Details

ID	`Salesforce Indicators`
Provider	Salesforce
Category	Data Enrichment & Threat Intelligence
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

Configuration parameters

InstanceURL — Instance URL (required)
credentials — Credentials (required)
clientID — Consumer Key (required)
clientSecret — Consumer Secret (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
feedReputation — Indicator Reputation
feedReliability — Source Reliability (required)
feedExpirationPolicy —
feedExpirationInterval —
feedFetchInterval — Feed Fetch Interval
feedBypassExclusionList — Bypass exclusion list
object — Object Name (required)
date_field — Date Field
key_field — Value Field (required)
filter — Filter
fields — Fields
indicator_history — Indicator History (in days)
feed — Fetch indicators
feedTags — Tags
tlp_color — Traffic Light Protocol Color

Commands (1)

salesforce-get-indicators
Executes the fetch-indicators command

Source

SalesforceIndicators.py SalesforceIndicators.yml SalesforceIndicators_description.md

Download History Raw

To set up Salesforce to work with Cortex XSOAR:
Add a new connected App in salesforce by following the instruction [here](https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_defining_remote_access_applications.htm)
If you already have a connected App, go to “Setup” -> “App Manager” -> choose the correct App from the list and press “View”.
The Consumer Key / Secret is under “API (Enable OAuth Settings)”
For detailed instructions see the Credentials walkthrough section at [Cortex XSOAR support](https://support.demisto.com/hc/en-us/articles/360001848133-Integration-Salesforce).