ZeroFoxKeyIncidents

Cloud-based SaaS to detect risks found on social media and digital channels.

Category

Data Enrichment & Threat Intelligence

Pack

ZeroFox

Configuration parameters

• url — URL (e.g., https://api.zerofox.com/) (required)
• isFetch — Fetch incidents
• credentials — Username (required)
• first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• max_fetch — Maximum number of incidents per fetch
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (1)

• zerofox-get-key-incident-attachment — Fetches a Key Incident Attachment by ID and uploads it to the current investigation War Room.