category: Data Enrichment & Threat Intelligence provider: BitcoinAbuse commonfields: id: BitcoinAbuse version: -1 configuration: - display: Fetch indicators name: feed type: 8 defaultvalue: 'true' required: false - display: API Key name: api_key type: 4 hidden: true required: false - displaypassword: API Key name: credentials_api_key hiddenusername: true type: 9 required: false - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false - additionalinfo: The time window for the first fetch (retroactive). defaultvalue: 30 Days display: First Fetch Time name: initial_fetch_interval options: - 30 Days - Forever required: true type: 15 - additionalinfo: Indicators from this integration instance will be marked with this reputation defaultvalue: Bad display: Indicator Reputation name: feedReputation options: - None - Good - Suspicious - Bad type: 18 required: false - additionalinfo: Reliability of the source providing the intelligence data defaultvalue: A - Completely reliable display: Source Reliability name: feedReliability options: - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged required: true type: 15 - defaultvalue: indicatorType display: '' name: feedExpirationPolicy options: - never - interval - indicatorType - suddenDeath type: 17 required: false - additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed display: Traffic Light Protocol Color name: tlp_color options: - RED - AMBER - GREEN - WHITE type: 15 required: false - defaultvalue: '1440' display: Feed Fetch Interval name: feedFetchInterval type: 19 required: false - display: '' name: feedExpirationInterval type: 1 required: false - additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system. display: Bypass exclusion list name: feedBypassExclusionList type: 8 required: false - additionalinfo: Supports CSV values. display: Tags name: feedTags type: 0 required: false description: Deprecated. No available replacement. display: BitcoinAbuse Feed (Deprecated) name: BitcoinAbuse script: commands: - arguments: - description: Address of the abuser. name: address required: true - description: Information about the abuser. name: abuser required: true - description: Description of the abuse. name: description - auto: PREDEFINED description: Type of abuse. The "abuse_type_other" field is required when the value of the "abuse_type" field is "other". Possible values are "ransomware", "darknet market", "bitcoin tumber", "blackmail scam", "sextortion", and "other" name: abuse_type predefined: - ransomware - darknet market - bitcoin tumbler - blackmail scam - sextortion - other required: true - description: Description of the abuse type. The "abuse_type_other" field is required when the value of the "abuse_type" field is "other". name: abuse_type_other description: Reports an abuser to Bitcoin Abuse service. 'abuse_type_other' field is required when 'abuse_type' is other name: bitcoinabuse-report-address deprecated: true - arguments: - defaultValue: "50" description: The maximum number of results to return. name: limit description: Gets indicators from the feed. name: bitcoinabuse-get-indicators deprecated: true dockerimage: demisto/python3:3.10.12.63474 feed: true isFetchSamples: true script: '' subtype: python3 type: python fromversion: 5.5.0 tests: - No tests (deprecated) deprecated: true