CybleEvents

Cyble Events for Vision Users. Must have Vision API access to use the threat intelligence.

Category

Data Enrichment & Threat Intelligence

Pack

CybleEvents

Configuration parameters

• url — URL (required)
• token — Access Token (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetch — Fetch incidents
• incidentFetchInterval — Incidents Fetch Interval
• max_fetch — Incident Fetch Limit (required)
• incidentType — Incident type
• priority — Priority

Commands (3)

• cyble-vision-fetch-alerts — Fetch Incident event alerts based on the given parameters. Alerts would have multiple events grouped into one based on specific service type. So user would see in few cases more events than the limit provided.
• cyble-vision-fetch-event-detail — Fetch Incident detail based on event type and event ID.
• cyble-vision-fetch-iocs — Fetch the indicators for the given timeline.