Orca

Agentless, Workload-Deep, Context-Aware Security and Compliance for AWS, Azure, and GCP.

Category

Utilities

Pack

Orca

Configuration parameters

• api_token — (required)
• api_host — API Host
• first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• isFetch — Fetch incidents
• max_fetch — Max fetch
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• fetch_informational — Also Fetch informational alerts (deprecated)
• pull_existing_alerts — Pull Existing Alerts

Commands (7)

• orca-download-malicious-file — Downloads a capture file from CS Enterprise.
• orca-get-alert-event-log — Get alert event log.
• orca-get-alerts — Get the alerts on cloud assets.
• orca-get-asset — Get Description of An asset. Deprecated, disabled.
• orca-set-alert-severity — Change severity for the alert.
• orca-set-alert-status — Get alert event log.
• orca-verify-alert — Trigger verify alert.