category: Data Enrichment & Threat Intelligence
commonfields:
  id: Cybersixgill_DVE_Enrichment
  version: -1
configuration:
- display: Sixgill API client ID
  name: client_id
  required: true
  type: 0
  section: Connect
- display: Sixgill API client secret
  name: client_secret
  required: true
  type: 4
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: By enriching CVEs with the DVE Score, Cortex XSOAR customers gain deeper visibility with relevant threat intel from the deep and dark web with dynamic attributes such as where they are trending, POC exploit details, and more. Loaded with extra-context, this allows users to accurately understand the real impact of CVEs to effectively prioritize critical vulnerabilities.
display: Cybersixgill DVE Enrichment
name: Cybersixgill_DVE_Enrichment
script:
  commands:
  - arguments:
    - default: true
      isArray: true
      name: cve_id
      description: 'comma separated list of cves id.'
      required: true
    description: Returns information for each CVE in the input list.
    name: cybersixgill-cve-enrich
    outputs:
    - contextPath: Sixgill.CVE.value
      description: CVE ID.
      type: String
    - contextPath: Sixgill.CVE.Description
      description: Description of the given DVE ID.
      type: String
    - contextPath: Sixgill.CVE.Created
      description: The creation date of the CVE.
      type: Date
    - contextPath: Sixgill.CVE.Modified
      description: The modified date of the CVE.
      type: Date
    - contextPath: Sixgill.CVE.Cybersixgill_DVE_score_current
      description: The current Sixgill DVE Score.
      type: String
    - contextPath: Sixgill.CVE.Cybersixgill_DVE_score_highest_ever_date
      description: The date on which Sixgill's highest DVE score ever reported.
      type: Date
    - contextPath: Sixgill.CVE.Cybersixgill_DVE_score_highest_ever
      description: Sixgill's highest DVE score ever reported.
      type: String
    - contextPath: Sixgill.CVE.Cybersixgill_Previously_exploited_probability
      description: Sixgill's score of previously exploited probability.
      type: String
    - contextPath: Sixgill.CVE.Previous_Level
      description: Previous level of the CVE ID.
      type: String
    - contextPath: Sixgill.CVE.CVSS_3_1_score
      description: CVSS 3.1 score.
      type: String
    - contextPath: Sixgill.CVE.CVSS_3_1_severity
      description: CVSS 3.1 severity.
      type: String
    - contextPath: Sixgill.CVE.NVD_Link
      description: NVD link.
      type: String
    - contextPath: Sixgill.CVE.NVD_last_modified_date
      description: NVD last modified date.
      type: Date
    - contextPath: Sixgill.CVE.NVD_publication_date
      description: NVD publication date.
      type: Date
    - contextPath: Sixgill.CVE.CVSS_2_0_score
      description: CVSS 2.0 score.
      type: String
    - contextPath: Sixgill.CVE.CVSS_2_0_severity
      description: CVSS 2.0 severity.
      type: String
    - contextPath: Sixgill.CVE.NVD_Vector_V2_0
      description: NVD vector v2.0.
      type: String
    - contextPath: Sixgill.CVE.NVD_Vector_V3_1
      description: NVD vector v3.1.
      type: String
    - contextPath: Sixgill.CVE.rawJSON
      type: String
      description: The raw JSON of the CVE entich information.

  - arguments:
    - default: true
      isArray: true
      name: cve_id
      description: comma separated list of cves id.
      required: true
    description: Returns remediation for each CVE in the input list.
    name: cybersixgill-cve-remediation
    outputs:
    - contextPath: Sixgill.CVE.value
      description: CVE ID.
      type: String
    - contextPath: Sixgill.CVE.Description
      description: Description of the given DVE remediation.
      type: String
    - contextPath: Sixgill.CVE.Solutions
      description: Possible remediation solutions for the CVE ID.
      type: String
    - contextPath: Sixgill.CVE.rawJSON
      description: The raw JSON of the CVE entich information.
      type: String
  dockerimage: demisto/sixgill:1.0.0.10120494
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.5.0
tests:
- No tests (auto formatted)
sectionorder:
- Connect
provider: BitSight