category: Data Enrichment & Threat Intelligence sectionorder: - Connect - Collect provider: Outpost24 commonfields: id: Blueliv ThreatCompass version: -1 configuration: - display: Server URL (e.g. https://demisto.blueliv.com/api/v2) name: url type: 0 required: false section: Connect - display: Username name: credentials type: 9 required: false section: Connect - additionalinfo: It can be found in the GUI URL. See Integration tips for more details. defaultvalue: '1' display: Organization ID name: organization required: true type: 0 section: Connect - display: Module Type name: type options: - Hacktivism - MobileApps - Credentials - CreditCards - DarkWeb - MediaTracker - Malware - DomainProtection - DataLeakage required: true type: 15 section: Collect - additionalinfo: It can be found in the GUI URL. See Integration tips for more details. display: Module ID name: module required: true type: 0 section: Connect - display: Trust any certificate (not secure) name: unsecure type: 8 required: false section: Connect - display: Use system proxy settings name: proxy type: 8 required: false section: Connect - display: Fetch incidents name: isFetch type: 8 required: false section: Collect - display: Incident type name: incidentType type: 13 required: false section: Collect - display: Incidents Fetch Interval name: incidentFetchInterval defaultvalue: '1' required: false type: 19 advanced: true section: Collect - defaultvalue: '50' display: Fetch Limit (Max.- 200, Recommended less than 50) name: fetch_limit type: 0 required: false section: Collect - defaultvalue: POSITIVE,NEGATIVE,INFORMATIVE,IMPORTANT display: Fetch resource status (POSITIVE, NEGATIVE...) name: fetch_status options: - IMPORTANT - NOT_AVAILABLE - NOT_IMPORTANT - NOT_PROCESSABLE - POSITIVE - NEGATIVE - INFORMATIVE type: 16 required: false section: Collect - additionalinfo: Format yyyy-mm-dd or yyyy-mm-ddThh:mm:ss display: First fetch time name: first_fetch_time type: 0 required: false section: Collect description: |- Blueliv ThreatCompass systematically looks for information about companies,products, people, brands, logos, assets, technology and other information, depending on your needs. Blueliv ThreatCompass allows you to monitor and track all this information to keep your data, your organization and its employees safe. display: Blueliv ThreatCompass name: Blueliv ThreatCompass script: commands: - arguments: - description: 'Minimum date to recover resources. Formats: yyyy-mm-dd or yyyy-mm-ddThh:mm:ss.' name: startDate - description: 'Maximum date to recover resources. Formats: yyyy-mm-dd or yyyy-mm-ddThh:mm:ss.' name: finalDate - description: Results page to get. For each page, there are {limit} resources. name: page - defaultValue: '100' description: Maximum number of resources to recover. name: limit description: Recovers all resources from the module. name: blueliv-resource-all outputs: - contextPath: BluelivThreatCompass description: List object of recovered resources. type: Unknown - arguments: - description: Keywords to search in resources text. name: search - description: 'Comma-separated list of any combination of status: NOT_AVAILABLE, NOT_IMPORTANT, NOT_PROCESSABLE, POSITIVE, NEGATIVE, INFORMATIVE, IMPORTANT.' name: status - description: 'Minimum date to recover resources. Formats: yyyy-mm-dd or yyyy-mm-ddThh:mm:ss.' name: startDate - description: 'Maximum date to recover resources. Formats: yyyy-mm-dd or yyyy-mm-ddThh:mm:ss.' name: finalDate - auto: PREDEFINED defaultValue: Both description: What results read status to get. name: read predefined: - Read - Unread - Both - description: Maximum number of resources to recover. name: limit - description: Results page to get. For each page, there are {limit} resources. name: page description: Search for a specific resource. name: blueliv-resource-search outputs: - contextPath: BluelivThreatCompass description: List object of recovered resources. type: Unknown - arguments: - description: Resource ID. name: id required: true description: Recovers all the information of a given resource. name: blueliv-resource-search-by-id outputs: - contextPath: BluelivThreatCompass description: Object with the information of the recovered resource. type: Unknown - arguments: - description: Resource ID. name: id required: true - auto: PREDEFINED description: New status to assign to the resource. Can be "positive", "negative", "informative", or "not_important". name: status predefined: - positive - negative - informative - not_important required: true description: Changes the status of a resource. name: blueliv-resource-set-status - arguments: - description: Resource ID. name: id required: true - description: Label ID. name: labelId required: true description: Adds a label to the given resource. name: blueliv-resource-set-label - arguments: - description: Resource ID. name: id required: true - auto: PREDEFINED defaultValue: 'true' description: The read status to set. Can be "true" or "false". Default is "true". name: read predefined: - 'true' - 'false' description: Marks the result as read or not read. name: blueliv-resource-set-read-status - arguments: - description: Resource ID. name: id required: true - auto: PREDEFINED defaultValue: '1' description: Rating to assign to the result. Can be a number between 1 and 5. Default is 1. name: rating predefined: - '1' - '2' - '3' - '4' - '5' description: Assigns a rating to the given result. name: blueliv-resource-assign-rating - arguments: - description: Resource ID. name: id required: true - auto: PREDEFINED defaultValue: group description: The new favorite status of the resource. Can be "Not", "User", "Group", or "All". name: favourite predefined: - Not - User - Group - All description: Changes the favorite status of a resource. name: blueliv-resource-favourite - arguments: - description: Resource ID. name: id required: true - auto: PREDEFINED description: 'The new TLP to assign to the resource. Can be "White", "Green", "Amber", or "Red".' name: tlp predefined: - White - Green - Amber - Red description: Sets a new TLP (Traffic Light Protocol) status to a given resource. name: blueliv-resource-set-tlp - description: Gets the label list of the module. name: blueliv-module-get-labels outputs: - contextPath: BluelivThreatCompass.Label.BackgroundColor description: Hexadecimal color of the label background in the GUI. type: String - contextPath: BluelivThreatCompass.Label.Id description: Label ID. type: String - contextPath: BluelivThreatCompass.Label.Name description: Label name. type: String - contextPath: BluelivThreatCompass.Label.Protected description: Whether the label is protected. type: Boolean - contextPath: BluelivThreatCompass.Label.TypeId description: Label type ID. type: Number - contextPath: BluelivThreatCompass.Label.TypeName description: Label type name. type: String - contextPath: BluelivThreatCompass.Label.Prioritized description: Whether the label is prioritized. type: Boolean - contextPath: BluelivThreatCompass.Label.TextColor description: Hexadecimal color of the label text in the GUI. type: String dockerimage: demisto/python3:3.12.13.10116658 isfetch: true runonce: false script: '-' subtype: python3 type: python fromversion: 5.0.0 tests: - No tests (auto formatted)