CTM360 (v2.3.7)
Take action on incidents derived from threat intelligence that is directly linked to your organization.
- Author
- CTM360
- Support
- partner
- URL
- https://www.ctm360.com
- Default data source
- CTM360_CyberBlindspot
- Categories
- Analytics & SIEM
Incident fields (93)
- CTM360 CyberBlindspot BC Breach Source
- CTM360 CyberBlindspot BC Domain
- CTM360 CyberBlindspot BC Email
- CTM360 CyberBlindspot BC Executive Name
- CTM360 CyberBlindspot BC Password
- CTM360 CyberBlindspot BC Username
- CTM360 CyberBlindspot Brand
- CTM360 CyberBlindspot CC CVV
- CTM360 CyberBlindspot CC Card Number
- CTM360 CyberBlindspot CC Expiry Month
- CTM360 CyberBlindspot CC Expiry Year
- CTM360 CyberBlindspot Class
- CTM360 CyberBlindspot Confirmation Time
- CTM360 CyberBlindspot Course of Action
- CTM360 CyberBlindspot First Seen
- CTM360 CyberBlindspot GS Enrichment
- CTM360 CyberBlindspot GS External Links
- CTM360 CyberBlindspot GS Finding ID
- CTM360 CyberBlindspot GS Internal Links
- CTM360 CyberBlindspot GS Landing URL
- CTM360 CyberBlindspot GS Resolving IP
- CTM360 CyberBlindspot GS Scan Status
- CTM360 CyberBlindspot GS Status Code
- CTM360 CyberBlindspot GS Submitted URL
- CTM360 CyberBlindspot GS Tags
- CTM360 CyberBlindspot GS Title
- CTM360 CyberBlindspot GS URL
- CTM360 CyberBlindspot GS URL Status
- CTM360 CyberBlindspot Incident Status
- CTM360 CyberBlindspot Incident Type
- CTM360 CyberBlindspot Last Seen
- CTM360 CyberBlindspot ML Computer Name
- CTM360 CyberBlindspot ML Date Compromised
- CTM360 CyberBlindspot ML Domain
- CTM360 CyberBlindspot ML Hostname
- CTM360 CyberBlindspot ML Malware Path
- CTM360 CyberBlindspot ML Masked Password
- CTM360 CyberBlindspot ML Operating System
- CTM360 CyberBlindspot ML Password
- CTM360 CyberBlindspot ML Software
- CTM360 CyberBlindspot ML Source URI
- CTM360 CyberBlindspot ML Sources
- CTM360 CyberBlindspot ML Stealer Family
- CTM360 CyberBlindspot ML URL Path
- CTM360 CyberBlindspot ML User
- CTM360 CyberBlindspot ML User Domain
- CTM360 CyberBlindspot ML Website
- CTM360 CyberBlindspot MM Account Identifier
- CTM360 CyberBlindspot MM BIC
- CTM360 CyberBlindspot MM Bank Account Country
- CTM360 CyberBlindspot MM Bank Account Holder Name
- CTM360 CyberBlindspot MM Bank Name
- CTM360 CyberBlindspot MM Money Mule ID
- CTM360 CyberBlindspot MM Suspect Emails
- CTM360 CyberBlindspot MM Suspect Names
- CTM360 CyberBlindspot MM Suspect Phones
- CTM360 CyberBlindspot MM Transfer Amount
- CTM360 CyberBlindspot MM Transfer Currency
- CTM360 CyberBlindspot Module
- CTM360 CyberBlindspot Remarks
- CTM360 CyberBlindspot Risks
- CTM360 CyberBlindspot SMF Platform
- CTM360 CyberBlindspot SMF Risk Score
- CTM360 CyberBlindspot Screenshots
- CTM360 CyberBlindspot Severity
- CTM360 CyberBlindspot Status
- CTM360 CyberBlindspot Subject
- CTM360 CyberBlindspot Ticket ID
- CTM360 CyberBlindspot Timestamp
- CTM360 HackerView Asset Type
- CTM360 HackerView Brand
- CTM360 HackerView DS Asset
- CTM360 HackerView DS CPE
- CTM360 HackerView DS CVSS Metrics
- CTM360 HackerView DS CVSS Score
- CTM360 HackerView DS Domain
- CTM360 HackerView DS EPSS Score
- CTM360 HackerView DS Evidence Request
- CTM360 HackerView DS Evidence Response
- CTM360 HackerView DS Evidence cURL Command
- CTM360 HackerView DS IP
- CTM360 HackerView DS Issue Description
- CTM360 HackerView DS Issue Type
- CTM360 HackerView DS Known Exploited
- CTM360 HackerView DS Port
- CTM360 HackerView DS Progress Status
- CTM360 HackerView DS Ticket ID
- CTM360 HackerView DS URI
- CTM360 HackerView DS URL
- CTM360 HackerView Potential Attack Types
- CTM360 HackerView Potential Impact
- CTM360 HackerView Scan Type
- CTM360 HackerView Technologies
Integrations (2)
- CTM360 CyberBlindspot
- CTM360 HackerView
Playbooks (6)
- CyberBlindspot Incident Management
- CyberBlindspot Incident Management V2
- CyberBlindspot Incident Management V3
- CyberBlindspot Retrieve Incident Screenshots
- HackerView Incident Management
- HackerView Incident Management V2
README
In External Attack Surface Management, HackerView provides an inventory of your digital assets discovered automatically, identifies issues (including vulnerabilities, misconfigurations, and exposures) in these digital assets, and generates a digital risk scorecard for your organization. The scorecard can also be generated for a limited number of your vendors for free.
In Digital Risk Protection, CyberBlindspot detects threats across the surface, deep, and dark web and monitors for over 40 threat types, i.e., actual or potential threats targeting your organization, brands, and executives. These incidents include phishing, social media fraud, suspicious mobile apps, look-alike domains, data leakage, etc.
What is CTM360?
CTM360 is a Software-as-a-Service (SaaS) technology platform that provides External Attack Surface Management, Digital Risk Protection, and Cyber Threat Intelligence in one consolidated platform.
What does this pack do?
This pack allows you to integrate HackerView & CyberBlindspot incidents with Cortex XSOAR. Automated integration fetches and populates incidents into Cortex XSOAR from HackerView & CyberBlindspot platforms along with all the details of the incident and leads the Cortex XSOAR analyst to take relevant actions over the incidents such as:
- HackerView:
- Incident response and feedback.
- CyberBlindspot:
- Closing the incident.
- Issuing an asset takedown request.
How to use it?
Install the pack and configure either one of the integration instances in Cortex XSOAR. For the configuration phase you will need an active API key which can be obtained in the respective platform. For any further support and questions, feel free to contact us via xsoar@ctm360.com
Pack Contributors
- Sayed A.
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.