Sixgill_Darkfeed_Enrichment

Sixgill Darkfeed Enrichment – powered by the broadest automated collection from the deep and dark web – is the most comprehensive IOC enrichment solution on the market. By enriching Palo Alto Networks Cortex XSOAR IOCs with Darkfeed, customers gain unparalleled context and essential explanations in order to accelerate their incident prevention and response and stay ahead of the threat curve. Automatically enrich Cortex XSOAR IOCs (machine to machine) via Darkfeed. Block threats and enrich endpoint protection in real-time from the Cortex XSOAR dashboard, gain contextual and actionable insights with essential explanations of Cortex XSOAR IOCs.

Category

Data Enrichment & Threat Intelligence

Pack

Sixgill-Darkfeed

Configuration parameters

• client_id — Sixgill API client ID (required)
• client_secret — Sixgill API client secret (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• integrationReliability — Source Reliability
• feedExpirationPolicy —
• feedExpirationInterval —

Commands (6)

• domain — Returns information and a reputation for each domain name in the input list.
• file — Returns information and a reputation for each file hash in the input list.
• ip — Returns information and a reputation for each IP in the input list.
• sixgill-get-actor — Returns information and a reputation for each actor in the input list.
• sixgill-get-post-id — Returns information and a reputation for each post ID in the input list.
• url — Returns information and a reputation for each URL in the input list.