Cyberint (v1.5.2)
Cyberint provides intelligence-driven digital risk protection. This integration will help your enterprise effectively consume actionable cyber alerts to increase your security posture.
- Author
- Cyberint
- Support
- partner
- URL
- https://cyberint.com
- Categories
- Analytics & SIEM
Incident fields (37)
- CyberInt Alert Data
- CyberInt Alert ID
- CyberInt Alert URL ID
- CyberInt Attachments
- CyberInt CVEs
- CyberInt Confidence
- CyberInt Created by
- CyberInt Created date
- CyberInt Credentials Exposed CSV
- CyberInt Description
- CyberInt Descriptors
- CyberInt Expert Analysis
- CyberInt Impact
- CyberInt Impacts
- CyberInt Payment Card Exposed CSV
- CyberInt Recommendation
- CyberInt Related IOCs
- CyberInt Related entities
- CyberInt Source
- CyberInt Source category
- CyberInt Status
- CyberInt Tags
- CyberInt Targeted Brand
- CyberInt Targeted Vector
- CyberInt Targeted Vectors
- CyberInt Threat Actor
- CyberInt Ticket ID
- CyberInt Title
- CyberInt Type
- CyberInt Vulnerable CName Record
- Cyberint Alert Close Reason
- Cyberint Alert Close Reason Description
- Cyberint Alert URL
- Cyberint Category
- Cyberint File Type
- Cyberint Related Entity
- Cyberint Targeted Brands
Integrations (4)
- Check Point EM Feed
- Check Point EM ThreatCloud Intelligence Feed
- Check Point EM Takedowns
- Check Point EM Alerts
Layouts (1)
- Cyberint Incident Layout
Playbooks (4)
- Check Point - Credential Leak Validation and Response
- Check Point - IOC Enrichment and Triage
- Check Point - Phishing Takedown
- Check Point - Vulnerability Exploitation Monitoring
README
Check Point Exposure Management (formerly Cyberint)
Check Point Exposure Management provides intelligence-driven digital risk protection.
Check Point Exposure Management helps you identify emerging threats, verifies your security posture, and responds effectively to reduce their impact.
Visit our site at checkpoint.com
What does this pack do?
Check Point Exposure Management and XSOAR integration is here to simplify and streamline Digital Risk Protection for Cortex XSOAR users, bring enriched threat intelligence from the Check Point Exposure Management Platform into Cortex XSOAR and automatically implement playbooks and incident processes.
- Leverages enriched and contextualized data from the Check Point Exposure Management platform to maximize your security posture within Cortex XSOAR.
- Easily exposes attack tools, phishing sites, fraud incidents, and more.
- Automatically blocks IOCs, resets account credentials, changes access tokens, and more.
- Optimizes your security team’s performance for faster Mean Time to Acknowledge (MTTA) and Mean Time to Remediate (MTTR).
- Tracks the status of tickets with automatic sync updates across systems for instant visibility and comprehensive performance metrics.
Out-of-the-box playbooks
The pack ships with ready-to-use automation playbooks that operationalize Check Point Exposure Management threat intelligence directly into SOC workflows:
- Check Point - IOC Enrichment and Triage - Enriches IP, domain, URL and file-hash indicators with Check Point Exposure Management threat intelligence and applies triage decision logic.
- Check Point - Credential Leak Validation and Response - Validates and responds to leaked employee or customer credentials, with automated or semi-automated remediation.
- Check Point - Vulnerability Exploitation Monitoring - Enriches CVEs with Check Point Exposure Management vulnerability intelligence and prioritizes them based on real-world exploitation.
- Check Point - Phishing Takedown - Automates or semi-automates the takedown of high-confidence phishing websites, including takedown submission and status polling.
Additional useful links
- Link to our blog