Ironscales Event Collector
Use this integration to fetch email security incidents from Ironscales as XSIAM events.
- Category
- Pack
- IronscalesEventCollector
Configuration parameters
- url — Server URL (e.g., https://appapi.ironscales.com) (required)
- apikey — (required)
- company_id — Company ID (required)
- scopes — Scopes (e.g., "company.all") (required)
- max_fetch — Maximum number of events per fetch
- first_fetch — First fetch
- collect_all_events — Collect all events
- mailbox_enrichment — Fetch mailbox mitigation details
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
Commands (1)
- ironscales-get-events — Gets events from Ironscales. This command is intended for development and debugging purposes and is to be used with caution as it may create duplicate events, exceed API request rate limits, and disrupt the fetch events mechanism.