ETDXsoarConnector

Fetches Cisco Email Threat Defense (ETD) message events and creates incidents.

Category

Analytics & SIEM

Pack

ETDXsoarConnector

Configuration parameters

• etd_base_url — ETD Base URL (required)
• api_key — (required)
• client_id — Client ID (required)
• client_secret — (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)
• first_fetch — First Fetch Time
• isFetch — Fetch incidents
• incidentFetchInterval — Incidents Fetch Interval
• incidentType — Incident type
• max_fetch — Max fetch

Commands (1)

• cisco-etd-move-message — Reclassifies and remediates an ETD message.