Integrations and scripts

Integrations and scripts enable seamless connections with other security tools, automate repetitive tasks, and provide customization for your organization's unique requirements. By leveraging these capabilities, cybersecurity teams can respond effectively to security events, reduce response time, and enhance overall security posture.

Sub-topics

• Components
  • Integration directory structure
  • Integration metadata YAML file
  • Integration and script parameter types
  • Integration description file
  • Integration Logo Requirements
• Developing
  • Python code conventions
  • PowerShell
  • General naming conventions
  • Integration Parameters
  • Context and outputs
  • Context standards
  • Generic commands
  • Reputation and DBot score
  • Integration commands
  • Using Docker
• Advanced topics
  • Fetching credentials
  • Event collector integrations
  • Feed Integrations
  • Long Running Containers
  • Transform Language (DT)
  • Integration cache
  • OpenAPI (Swagger) Codegen
  • Postman code generator
  • Generate Integration Python Code from JSON
  • Generate YAML from Python
  • Scheduled Commands
  • Fetch missing incidents with generic lookback methods
• Create a sample integration
  • Define sample integration settings
  • Write integration code
  • Test the integration