Threatmon

Integration with Threatmon for vulnerability threat intelligence.

Data Enrichment & Threat Intelligence · ThreatMon

Configuration parameters

  • url — API URL (required)
  • credentials — (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • lastIncidentId — Last Incident ID (for initial fetch)
  • incidentType — Incident type
  • isFetch — Fetch incidents
  • fetchInterval — Fetch Interval (minutes)

Commands (2)

  • threatmon_request_takedown

    Submits a takedown request for a specific Threatmon finding. Eligible finding types include Phishing Domain Detected, Rogue Mobile App Detected, Fake SM Account Detected, and similar alarm types.

  • threatmon_update_incident_status

    Update Incident Status endpoint allows you to change/update status. of specified Threatmon incidents.