MS-ISAC

This API queries alerts and alert data from the MS-ISAC API to enrich and query alerts from the platform.

Category

Utilities

Pack

MS-ISAC

Configuration parameters

• apikey — (required)
• url — Server URL (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• incidentType — Incident type
• isFetch — Fetch incidents
• incidentFetchInterval — Incidents Fetch Interval
• first_fetch — First Fetch Time

Commands (4)

• msisac-get-alert — Retrieve alert data by its ID.
• msisac-get-event — Retrieve alert data by its ID.
• msisac-retrieve-cases — Retrieves a list of MS-ISAC cases since the given timestamp. If no timestamp is given, command will return cases from the last 72 hours.
• msisac-retrieve-events — Retrieves a list of MS-ISAC events for a given number of days (one or greater).