ACTI Vulnerability Enrichment Deprecated

Deprecated. No available replacement.

Accenture CTI v2 · 5 tasks · 0 inputs · 0 outputs

Details

IDACTI Vulnerability Enrichment
From Version6.0.0
Tasks5

README

  • NOTE: This playbook is deprecated.
  • Enriches a vulnerability (CVE) with context from ACTI’s Vulnerability Intelligence feed and stores the content in the XSOAR indicators store.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • ACTI Vulnerability Query

Scripts

This playbook does not use any scripts.

Commands

  • extractIndicators
  • acti-vuln

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

ACTI Vulnerability Enrichment

Commands used

acti-vuln extractIndicators

Flowchart

Start Start END END Extract CVE from Incident - extractIndicators Extract CVE from Incident extractIndicators Enrich Vulnerability using ACTI Integration Enrich Vulnerability usin... CVE enrichment using ACTI Vulnerability Query integration - acti-vuln CVE enrichment using ACTI... acti-vuln

Source

playbook-ACTI_Vulnerability_Enrichment.yml
Download History Raw 
id: ACTI Vulnerability Enrichment
version: -1
name: ACTI Vulnerability Enrichment
description: Deprecated. No available replacement.
starttaskid: '0'
tasks:
  '0':
    id: '0'
    taskid: 300898a7-caa1-4654-8361-75548456fccb
    type: start
    task:
      id: 300898a7-caa1-4654-8361-75548456fccb
      version: -1
      name: ''
      iscommand: false
      brand: ''
      description: ''
    nexttasks:
      '#none#':
      - '5'
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  '3':
    id: '3'
    taskid: 1ce8b7af-7c45-4f8e-8b31-2fb3f2489c44
    type: title
    task:
      id: 1ce8b7af-7c45-4f8e-8b31-2fb3f2489c44
      version: -1
      name: END
      type: title
      iscommand: false
      brand: ''
      description: ''
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 690
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  '5':
    id: '5'
    taskid: 246bfca5-50b4-49cc-8a96-89ab74a20a21
    type: regular
    task:
      id: 246bfca5-50b4-49cc-8a96-89ab74a20a21
      version: -1
      name: Extract CVE from Incident
      description: Extract all indicators according to server indicators configuration
      script: Builtin|||extractIndicators
      type: regular
      iscommand: true
      brand: Builtin
    nexttasks:
      '#none#':
      - '6'
    scriptarguments:
      text:
        simple: ${incident}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  '6':
    id: '6'
    taskid: 07307055-12ae-4d5a-8b6a-2f83de587028
    type: title
    task:
      id: 07307055-12ae-4d5a-8b6a-2f83de587028
      version: -1
      name: Enrich Vulnerability using ACTI Integration
      type: title
      iscommand: false
      brand: ''
      description: ''
    nexttasks:
      '#none#':
      - '7'
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 370
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  '7':
    id: '7'
    taskid: 896dee68-eed1-4452-8b2f-ea75140bc7d4
    type: regular
    task:
      id: 896dee68-eed1-4452-8b2f-ea75140bc7d4
      version: -1
      name: CVE enrichment using ACTI Vulnerability Query integration
      description: Checks reputation of the vulnerability.
      script: ACTI Vulnerability Query|||acti-vuln
      type: regular
      iscommand: true
      brand: ACTI Vulnerability Query
    nexttasks:
      '#none#':
      - '3'
    scriptarguments:
      cve:
        simple: ${ExtractedIndicators.CVE}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 515
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 705,
        "width": 380,
        "x": 50,
        "y": 50
      }
    }
  }
inputs: []
outputs: []
tests:
- No tests (deprecated)
fromversion: 6.0.0
deprecated: true