EclecticIQ Platform

Deprecated. No available replacement.

Category

Data Enrichment & Threat Intelligence

Pack

EclecticIQ

Configuration parameters

• url — Server URL (e.g. https://192.168.0.1) (required)
• credentials — Username (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• ip_threshold — IP threshold. Minimum maliciousness confidence level to consider the IP address malicious: High, Medium, Low, Safe, Unknown
• url_threshold — URL threshold. Minimum maliciousness confidence level to consider the URL malicious: High, Medium, Low, Safe, Unknown
• file_threshold — File threshold. Minimum maliciousness confidence level to consider the file malicious: High, Medium, Low, Safe, Unknown
• email_threshold — Email threshold. Minimum maliciousness confidence level to consider the email address malicious: High, Medium, Low, Safe, Unknown
• domain_threshold — Domain threshold. Minimum maliciousness confidence level to consider the domain malicious: High, Medium, Low, Safe, Unknown
• integrationReliability — Source Reliability
• feedExpirationPolicy —
• feedExpirationInterval —

Commands (6)

• domain — Gets the reputation of a domain observable.
• eclecticiq-get-observable-related-entity — Returns related entities of a single observable.
• email — Gets the reputation of an email address observable.
• file — Gets the reputation of a file hash observable.
• ip — Get reputation of IP address observable
• url — Gets the reputation of a URL observable.