SpyCloud

With the SpyCloud integration data from breaches can be pulled and further processed in Playbooks. Filtering parameters can be used to filter the data set.

Analytics & SIEM · SpyCloud

Configuration parameters

  • url — Base URL of SpyCloud (required)
  • apikey — API Key of SpyCloud (required)

Commands (5)

  • spycloud-domain-data

    Get all the data from a monitored domain and the breaches occurred that relates with it. Can be scoped by domain, type and severity

  • spycloud-email-data

    Get all the data from a monitored email address and the breaches occurred that relates with it. Can be scoped by date, severity and breach

  • spycloud-get-breach-data

    Retrieves the breach details. While very similar to list-breaches, this command obtains one specific breach, which is easier for automation tasks

  • spycloud-list-breaches

    Lists the breaches identified. By default this lists all breaches known in Spycloud. With the arguments it's possible to scope the results on date and keywords.

  • spycloud-watchlist-data

    Get all the data from a watchlist.