category: Email
provider: Cisco Systems
sectionorder:
- Connect
- Collect
commonfields:
  id: Armorblox
  version: -1
configuration:
- display: Armorblox tenant name
  name: tenantName
  required: true
  type: 0
  section: Connect
- defaultvalue: Armorblox
  display: Incident type
  name: incidentType
  type: 13
  section: Connect
  required: false
- display: API key
  name: apikey
  required: true
  type: 4
  section: Connect
- defaultvalue: "50"
  display: Fetch limit
  name: max_fetch
  type: 0
  section: Collect
  required: false
- defaultvalue: lastDay
  display: First fetch timestamp
  name: first_fetch
  options:
  - lastDay
  - last3Days
  - last5Days
  - last7Days
  - lastMonth
  - last3Months
  - lastYear
  - last2Years
  - allTime
  type: 15
  section: Collect
  required: false
- defaultvalue: "1"
  display: Incidents Fetch Interval
  name: incidentFetchInterval
  type: 0
  section: Collect
  advanced: true
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Fetch incidents
  name: isFetch
  type: 8
  section: Collect
  required: false
description: |-
  Armorblox is an API-based platform that stops targeted email attacks,
    protects sensitive data, and automates incident response.
display: Armorblox
name: Armorblox
script:
  commands:
  - arguments: []
    description: Gets a list of armorblox incidents.
    name: fetch-incidents
  - arguments:
    - description: The incident id of the incident under inspection.
      name: incident_id
      required: true
    description: Check the recommended remediation action for any incident.
    name: armorblox-check-remediation-action
    outputs:
    - contextPath: Armorblox.Threat.remediation_actions
      description: Should be the remediation action name for the incident under inspection.
      type: string
  dockerimage: demisto/armorblox:1.0.0.10120494
  isfetch: true
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)