commonfields:
  id: CloudShark
  version: -1
name: CloudShark
display: CloudShark
category: Data Enrichment & Threat Intelligence
provider: QA Cafe LLC
description: Use the CloudShark integration to upload, share, and collaborate on network packet capture files using your on-premises CS Enterprise system.
configuration:
- display: CS Enterprise URL
  name: url
  defaultvalue: ""
  type: 0
  required: true
- display: API Token
  name: apikey
  defaultvalue: ""
  type: 4
  required: true
- display: Use system proxy settings
  name: proxy
  defaultvalue: "false"
  type: 8
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  defaultvalue: "false"
  type: 8
  required: false
script:
  script: ''
  type: python
  commands:
  - name: cloudshark-delete
    arguments:
    - name: capture_id
      description: Capture ID of the capture in CS Enterprise.
    outputs:
    - contextPath: CloudShark.Result
      description: Result of the delete command.
    description: Deletes a capture file from CS Enterprise.
  - name: cloudshark-download
    arguments:
    - name: capture_id
      description: Capture ID of the capture in CS Enterprise.
    outputs:
    - contextPath: File
      description: The file downloaded from CS Enterprise.
    description: Downloads a capture file from CS Enterprise.
  - name: cloudshark-info
    arguments:
    - name: capture_id
      required: true
      description: Capture ID of the capture in CS Enterprise.
    outputs:
    - contextPath: CloudShark.CaptureInfo.CaptureID
      description: Capture ID of the capture.
      type: string
    - contextPath: CloudShark.CaptureInfo.GroupWrite
      type: boolean
      description: Group permission setting.
    - contextPath: CloudShark.CaptureInfo.Size
      type: number
      description: Size of the capture file.
    - contextPath: CloudShark.CaptureInfo.DataByteRate
      type: string
      description: Data byte rate.
    - contextPath: CloudShark.CaptureInfo.TagList
      type: string
      description: List of the capture file's tags.
    - contextPath: CloudShark.CaptureInfo.DataBitRate
      type: string
      description: Data bit rate.
    - contextPath: CloudShark.CaptureInfo.FileName
      type: string
      description: Filename.
    - contextPath: CloudShark.CaptureInfo.SHA1
      type: string
      description: SHA1 hash of the capture file.
    - contextPath: CloudShark.CaptureInfo.AvgPacketRate
      type: string
      description: Average packet rate.
    - contextPath: CloudShark.CaptureInfo.StartTime
      type: date
      description: Start time of the capture.
    - contextPath: CloudShark.CaptureInfo.CreatedAt
      type: date
      description: When the capture file was added.
    - contextPath: CloudShark.CaptureInfo.AvgPacketSize
      type: string
      description: Average packet size.
    - contextPath: CloudShark.CaptureInfo.User
      type: string
      description: Owner of the capture file.
    - contextPath: CloudShark.CaptureInfo.LastAccessed
      type: date
      description: When the capture was last accessed.
    - contextPath: CloudShark.CaptureInfo.DisableAutodelete
      type: boolean
      description: Whether autodelete is enabled or disabled.
    - contextPath: CloudShark.CaptureInfo.CapFileID
      type: number
      description: Capture file ID.
    - contextPath: CloudShark.CaptureInfo.EndTime
      type: date
      description: End time of the capture.
    - contextPath: CloudShark.CaptureInfo.NumPackets
      type: number
      description: Number of packets in the capture.
    - contextPath: CloudShark.CaptureInfo.Encapsulation
      type: string
      description: Encapsulation type.
    - contextPath: CloudShark.CaptureInfo.Duration
      type: string
      description: Duration of the capture.
    - contextPath: CloudShark.CaptureInfo.Comments
      type: string
      description: Comments for the capture.
    - contextPath: CloudShark.CaptureInfo.Public
      type: boolean
      description: Whether permission settings are public.
    - contextPath: CloudShark.CaptureInfo.DataSize
      type: number
      description: Size of data in the capture.
    - contextPath: CloudShark.CaptureInfo.File
      type: string
      description: Location of capture file on disk.
    - contextPath: CloudShark.CaptureInfo.FileType
      type: string
      description: File type.
    - contextPath: CloudShark.CaptureInfo.FileSource
      type: string
      description: Source of capture file.
    - contextPath: CloudShark.CaptureInfo.Truncated
      type: string
      description: Whether the capture file is truncated.
    - contextPath: CloudShark.CaptureInfo.Group
      type: string
      description: Group with which the capture file is shared.
    description: Retrieves meta-information about a capture file from CS Enterprise.
  - name: cloudshark-upload
    arguments:
    - name: file
      required: true
      description: EntryID of the network capture file to upload.
    - name: additional_tags
      description: A comma-separated list of tags to apply to the capture file.
    - name: filename
      description: The filename of the capture in CS Enterprise.
    outputs:
    - contextPath: URL.Data
      description: URL of the capture file in CS Enterprise.
      type: string
    - contextPath: CloudShark.CaptureID
      description: Capture ID of the capture in CS Enterprise.
      type: string
    description: Uploads a capture file into CS Enterprise
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  subtype: python3
tests:
- CloudShark - Test Playbook
fromversion: 5.0.0