Digital Guardian

Use Digital Guardian Integration to fetch incidents and to programmatically add or remove entries from watchlists and component lists.

Category

Data Enrichment & Threat Intelligence

Pack

DigitalGuardian

Configuration parameters

• auth_url — Auth Server URL (required)
• arc_url — Gateway Base URL (required)
• client_id — API Client ID (required)
• client_secret — API Client Secret (required)
• export_profile — Export Profile (required)
• isFetch — Fetch incidents
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (6)

• digitalguardian-add-componentlist-entry — Add Componentlist Entry.
• digitalguardian-add-watchlist-entry — Add Watchlist Entry.
• digitalguardian-check-componentlist-entry — Check Componentlist Entry.
• digitalguardian-check-watchlist-entry — Check Watchlist Entry.
• digitalguardian-remove-componentlist-entry — Remove Componentlist Entry.
• digitalguardian-remove-watchlist-entry — Remove Watchlist Entry.