Mandiant

Enrich Indicators of Compromise, and fetch information about Actors, Malware Families, and Campaigns from Mandiant Advantage.

Category

Data Enrichment & Threat Intelligence

Pack

MandiantAdvantageThreatIntelligence

Configuration parameters

• api_key — API Key (required)
• secret_key — Secret Key (required)
• timeout — Timeout
• reliability — Source Reliability (required)
• tlp_color — Traffic Light Protocol Color
• tags — Tags
• map_to_mitre_attack — Map Attack Pattern Relationships to Mitre ATT&CK.

Commands (8)

• cve — Get information about a CVE from Mandiant.
• domain — Get information about a domain from Mandiant.
• file — Get information about a file hash from Mandiant.
• ip — Get information about an IP address from Mandiant.
• mati-get-actor — Get information about a Threat Actor from Mandiant.
• mati-get-campaign — Retrieve information about a Campaign from Mandiant.
• mati-get-malware — Get information about a Malware Family from Mandiant.
• url — Get information about a URL from Mandiant.