Serenety

Fetch Serenety alert from XMCO.

Vulnerability Management · XMCO

Details

IDSerenety
ProviderXM Cyber
CategoryVulnerability Management
From Version6.10.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM

README

XMCO Serenety

Configure XMCO Serenety in Cortex

To configure an instance of XMCO Serenety integration in Cortex XSOAR:

Parameter Required
Server URL (e.g. https://leportail.xmco.fr) True
API Key True
Trust any certificate (not secure) False
Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

fetch-incidents


Fetch the Serenety lerts from XMCO LePortail

Base Command

fetch-incidents

Input

Argument Name Description Required
scope A string representing the scope id to filter on Optional

Command Example

!fetch-incidents
!fetch-incidents scope=123456789

Configuration parameters

  • url — XMCO LePortail instance URL (required)
  • api_key — (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • isFetch — Fetch incidents
  • max_fetch — Maximum number of incidents per fetch
  • first_fetch — First fetch time
  • incidentType — Incident type
  • incidentFetchInterval — Incidents Fetch Interval

Commands (1)

  • fetch-incidents

    Fetch Serenety alert from XMCO LePortail.

fromversion: 6.10.0
category: Vulnerability Management
provider: XM Cyber
sectionorder:
- Connect
- Collect
commonfields:
  id: Serenety
  version: -1
configuration:
- display: XMCO LePortail instance URL
  defaultvalue: https://leportail.xmco.fr/
  name: url
  required: true
  type: 0
  section: Connect
- displaypassword: API Key
  name: api_key
  required: true
  type: 9
  hiddenusername: true
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Fetch incidents
  name: isFetch
  type: 8
  section: Collect
- display: Maximum number of incidents per fetch
  defaultvalue: '50'
  name: max_fetch
  type: 0
  required: false
  section: Collect
- defaultvalue: 3 days
  display: First fetch time
  additionalinfo: First alert created date to fetch.
  name: first_fetch
  type: 0
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  defaultvalue: 'XMCO Serenety Alert'
  type: 13
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  section: Collect
  advanced: true
description: 'Fetch Serenety alert from XMCO.'
display: Serenety
name: Serenety
script:
  commands:
  - name: fetch-incidents
    description: Fetch Serenety alert from XMCO LePortail.
  dockerimage: demisto/python3:3.12.13.10116658
  feed: false
  isfetch: true
  longRunning: false
  longRunningPort: false
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted).
defaultmapperin: XMCO - Serenety Mapper