commonfields: id: AlphaSOC Network Behavior Analytics version: -1 name: AlphaSOC Network Behavior Analytics display: AlphaSOC Network Behavior Analytics category: Analytics & SIEM sectionorder: - Connect - Collect provider: AlphaSOC description: Retrieve alerts from the AlphaSOC Analytics Engine. configuration: - display: AlphaSOC Analytics Engine URL name: server defaultvalue: https://api.alphasoc.net type: 0 required: true section: Connect - display: AlphaSOC API Key name: APIKey defaultvalue: "" type: 4 required: true section: Connect - display: Ignore events below severity name: severity defaultvalue: "4" additionalinfo: "AlphaSOC alert severity: (1) info, (2) low, (3) medium, (4) high, (5) critical" type: 0 required: true section: Collect - display: Include policy violations name: policy defaultvalue: "true" type: 8 required: false section: Collect - display: Use system proxy settings name: proxy type: 8 required: false section: Connect - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect - display: Fetch incidents name: isFetch type: 8 required: false section: Collect - display: Incident type name: incidentType type: 13 required: false section: Collect - display: Incidents Fetch Interval name: incidentFetchInterval defaultvalue: '1' required: false type: 19 advanced: true section: Collect script: script: '' type: javascript isfetch: true tests: - No tests fromversion: 5.0.0