CybelAngel Event Collector

CybelAngel collects reports from the CybelAngel platform, which specializes in external attack surface protection and management.

Category

Data Enrichment & Threat Intelligence

Pack

CybelAngel

Configuration parameters

• url — Server URL (required)
• credentials — Client ID (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetchEvents — Fetch events
• eventFetchInterval — Events Fetch Interval
• event_types_to_fetch — Event Types To Fetch
• max_fetch — The maximum number of reports per fetch (required)
• max_fetch_creds — The maximum number of Credential watchlist events per fetch
• max_fetch_domain — The maximum number of Domain watchlist events per fetch

Commands (10)

• cybelangel-archive-report-by-id-get — Retrieve an archived report by ID as a ZIP file.
• cybelangel-get-events — Send events from CybelAngel to XSIAM. Used mainly for debugging.
• cybelangel-mirror-report-get — Retrieve the mirror details for the specified report.
• cybelangel-report-attachment-get — Retrieve an attachment from a report.
• cybelangel-report-comment-create — Create a new comment on a report.
• cybelangel-report-comments-get — Retrieve comments from a report.
• cybelangel-report-get — Retrieve reports from CybelAngel.
• cybelangel-report-list — Retrieve reports from CybelAngel.
• cybelangel-report-remediation-request-create — Create a remediation request for a report.
• cybelangel-report-status-update — Update the status of one or multiple reports.