ACTI Indicator Query

ACTI provides intelligence regarding security threats and vulnerabilities.

Category

Data Enrichment & Threat Intelligence

Pack

AccentureCTI

Configuration parameters

• url — URL (required)
• api_token — (required)
• integrationReliability — Source Reliability (required)
• insecure — Trust any certificate (not secure)
• use_proxy — Use system proxy settings

Commands (6)

• acti-get-fundamentals-by-uuid — Checks reputation of a specific Malware Family/ Threat Campaign/ Threat Group/ Threat Actor.
• acti-get-ioc-by-uuid — Checks reputation of a specific indicator(URL/IP/Domain) uuid.
• acti-getThreatIntelReport — Fetches Intelligence Alerts & Intelligence Reports.
• domain — Checks the reputation of the given domain.
• ip — Checks the reputation of the given IP address.
• url — Checks the reputation of the given URL.