category: Deception & Breach Simulation
sectionorder:
- Connect
- Collect
provider: Cymulate
commonfields:
  id: Cymulate
  version: -1
configuration:
- display: X-token
  name: x-token
  required: true
  type: 4
  section: Connect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- defaultvalue: 'true'
  display: Show only 'penatrated' incidents
  name: onlyPenatrated
  type: 8
  required: false
  section: Collect
- display: Use server proxy
  name: useProxy
  type: 8
  required: false
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- defaultvalue: 1 hour
  display: First fetch time range (<number> <time unit>, e.g., 1 hour, 30 minutes) - Proofpoint supports maximum 1 hour fetch back
  name: fetch_time
  type: 0
  required: false
  section: Collect
description: Multi-Vector Cyber Attack, Breach and Attack Simulation.
display: Cymulate
name: Cymulate
script:
  commands:
  - arguments:
    - description: The attack unique identifier.
      name: attack_id
      required: true
    - description: The Cymulate module_type.
      name: module_type
      required: true
    - description: The incident unique identifier.
      name: incident_id
    description: This commands return full cymulate's incidents information.
    name: cymulate-get-incident-info
    outputs:
    - contextPath: Cymulate.Incident.Payload
      description: The Cymulate payload that generated this incident.
      type: String
    - contextPath: Cymulate.Incident.Name
      description: The name of the incident.
      type: String
    - contextPath: Cymulate.Incident.Status
      description: The attack status (Enum Values- Penetrated, Blocked, Dead).
      type: String
    - contextPath: Cymulate.Incident.ID
      description: The incident ID.
      type: String
    - contextPath: Cymulate.Incident.Md5
      description: The Md5.
      type: String
    - contextPath: Cymulate.Incident.Attack_Vector
      description: The Attack Vector.
      type: String
    - contextPath: Cymulate.Incident.Sha256
      description: 'The Sha256.'
      type: String
    - contextPath: Cymulate.Incident.Sha1
      description: The Sha1.
      type: String
    - contextPath: Cymulate.Incident.Cymulate_ID
      description: The cymulate's ID of the incident.
      type: String
    - contextPath: Cymulate.Incident.Attack_ID
      description: The cymulate's Attack ID of the incident.
      type: String
  dockerimage: demisto/python3:3.12.8.3296088
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests
defaultclassifier: Cymulate
defaultmapperin: Cymulate-mapper
fromversion: 5.0.0