OpenAi ChatGPT v3

This integration assists security professionals with security investigations, threat hunting, and anomaly detection by leveraging OpenAI GPT models' natural language conversation capabilities.

Category

Messaging and Conferencing

Pack

OpenAI

Configuration parameters

• url — Server URL (required)
• chatgpt_api_url — ChatGPT Server URL
• apikey —
• admin_api_key — Admin API Key
• compliance_api_key — Compliance API Key
• workspace_id — Workspace ID
• model-select — Model
• model-freetext — Model (Optional - overrides selected choice)
• max_tokens — Max tokens
• temperature — Temperature
• top_p — Top P
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetchEvents — Fetch events
• event_types_to_fetch — Events types to fetch
• audit_max_fetch — Maximum number of OpenAI Audit events per fetch
• compliance_max_fetch — Maximum number of Compliance events per fetch
• eventFetchInterval — Events Fetch Interval

Commands (11)

• gpt-analyze-email-body — Analyzes email body for potential security risks using the OpenAI Responses API. This is the Responses-API counterpart of gpt-check-email-body (which uses the Chat Completions API).
• gpt-analyze-email-header — Analyzes email headers for potential security issues using the OpenAI Responses API. This is the Responses-API counterpart of gpt-check-email-header (which uses the Chat Completions API).
• gpt-check-email-body — Checks the email body for possible security issues. Enables you to ask subsequent questions on the provided information using the 'gpt-send-message' command, and resets the conversation context by default.
• gpt-check-email-header — Checking email header for possible security issues. It is possible to keep asking questions on the provided info using 'gpt-send-message'. Resets conversation context by default.
• gpt-create-moderation — Runs text or an image through the OpenAI Moderations API and returns per-category flagging results. Exactly one of text, entry_id, or image_url must be provided.
• gpt-create-response — Sends a message to the OpenAI Responses API and receives the generated response. This command uses the Responses API which is recommended for all new projects (instead of gpt-send-message which uses the Chat Completions API). Supports multi-turn conversations via previous_response_id, reasoning effort control for o-series and gpt-5 models, and background execution.
• gpt-create-soc-email-template — Create an email template out of the conversation context to be sent from the SOC.
• gpt-draft-soc-email — Drafts a SOC email template using the OpenAI Responses API. This command uses the Responses API which is recommended for all new projects (instead of gpt-create-soc-email-template which uses the Chat Completions API). Consumes prior conversation context by design (e.g. from a preceding gpt-analyze-email-body call).
• gpt-list-models — Lists all models available to the configured API key. Lets users discover models per their actual API-key tier without redeploying the integration when OpenAI ships new ones.
• gpt-send-message — Send a plain message to the selected GPT model and receive the generated response.
• openai-get-events — Manually retrieves events from OpenAI. Use this command for development and debugging only, as it may produce duplicate events, exceed API rate limits, or disrupt the fetch mechanism.