DeepInstinct v3

Deep Instinct is a prevention-first approach to stopping ransomware and other malware using the world's first purpose-built, deep learning cybersecurity framework.

Category

Endpoint

Pack

DeepInstinct

Configuration parameters

• base_url — Base server URL (required)
• apikey — API Key (required)
• first_fetch — First event ID to fetch from
• max_fetch — Maximum number of indicators per fetch, max is 1000.
• isFetch — Fetch incidents
• incidentFetchInterval — Incidents Fetch Interval
• incidentType — Incident type
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (21)

• deepinstinctv3-add-devices-to-group — Add multiple devices to a group.
• deepinstinctv3-add-hash-to-allow-list — Add file hash to Allow List.
• deepinstinctv3-add-hash-to-deny-list — Add file hash to Deny List.
• deepinstinctv3-close-events — Close list of events.
• deepinstinctv3-delete-files-remotely — Delete multiple files remotely.
• deepinstinctv3-disable-device — Disable device at next check-in.
• deepinstinctv3-enable-device — Enable device at next check-in.
• deepinstinctv3-get-all-groups — Get all groups.
• deepinstinctv3-get-all-policies — Get list of all policies.
• deepinstinctv3-get-device — Get device information from its ID.
• deepinstinctv3-get-events — Get all events after given event ID.
• deepinstinctv3-get-suspicious-events — Get all suspicious events after given event ID.
• deepinstinctv3-isolate-from-network — Isolate device(s) from Network.
• deepinstinctv3-release-from-isolation — Release device(s) from isolation.
• deepinstinctv3-remote-file-upload — Upload file associated with given event id at next check-in.
• deepinstinctv3-remove-device — Remove agent from device at next check-in.
• deepinstinctv3-remove-devices-from-group — Remove list of devices from groups.
• deepinstinctv3-remove-hash-from-allow-list — Remove hash from Allow List.
• deepinstinctv3-remove-hash-from-deny-list — Remove hash from Deny List.
• deepinstinctv3-terminate-processes — Terminate list of processes.
• deepinstinctv3-upload-logs — Upload device logs from given device at next check-in.