category: Data Enrichment & Threat Intelligence provider: Dataminr sectionorder: - Connect - Collect commonfields: id: Dataminr Pulse ReGenAI version: -1 configuration: - display: Client ID displaypassword: Client Secret name: credentials type: 9 required: true section: Connect - additionalinfo: Provide the watchlist names from which to fetch the alerts. If not provided, alerts will be fetched from all available watchlists on the platform. display: Watchlist Names name: watchlist_names type: 16 required: false section: Collect - additionalinfo: Terms to search within Dataminr Alerts. display: Query name: query type: 0 required: false section: Collect - additionalinfo: Filters the incoming alerts with the provided alert type. Default All. defaultvalue: All display: Alert Type name: alert_type options: - All - Alert - Urgent - Flash type: 15 required: false section: Collect - additionalinfo: The maximum number of alerts to fetch each time. If the value is greater than 100, it will be considered as 100. The maximum is 100. defaultvalue: "40" display: Max Fetch name: max_fetch type: 0 required: false section: Collect - additionalinfo: Reliability of the source providing the intelligence data. defaultvalue: A - Completely reliable display: Source Reliability name: integrationReliability options: - A+ - 3rd party enrichment - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged type: 15 required: false section: Collect - defaultvalue: 'true' additionalinfo: Create relationships between indicators as part of enrichment. display: Create relationships name: create_relationships type: 8 required: false section: Collect - additionalinfo: Indicates whether to allow connections without verifying the SSL certificate's validity. display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect - additionalinfo: Indicates whether to use XSOAR's system proxy settings to connect to the API. display: Use system proxy settings name: proxy type: 8 required: false section: Connect - display: Incident type defaultvalue: Dataminr Pulse ReGenAI Alert name: incidentType type: 13 required: false section: Collect - display: Fetch incidents name: isFetch type: 8 required: false section: Collect - additionalinfo: The incident fetch interval. defaultvalue: '5' display: Incidents Fetch Interval name: incidentFetchInterval type: 19 required: false section: Collect - additionalinfo: This parameter is not supported as Dataminr Pulse API doesn't have time based filtering for fetching of alerts. defaultvalue: 0 seconds display: First Fetch Time (not supported) hidden: true name: first_fetch type: 0 required: false section: Collect description: Dataminr Pulse's AI-powered, real-time intelligence integrates into Cortex XSOAR workflows for faster detection and response. display: Dataminr Pulse - ReGenAI name: Dataminr Pulse ReGenAI script: commands: - description: Retrieves the Watchlists configured on the Dataminr platform. name: dataminrpulse-watchlists-get outputs: - contextPath: DataminrPulse.WatchLists.id description: An unique identifier for an individual list. This ID is needed to retrieve alerts for a given list. type: Number - contextPath: DataminrPulse.WatchLists.type description: The type of list. Can be one of the Topic, Company, or Custom. type: String - contextPath: DataminrPulse.WatchLists.name description: The name of list as specified in Dataminr platform. type: String - contextPath: DataminrPulse.WatchLists.subType description: The sub type of list as specified in Dataminr platform. type: String - arguments: - description: Comma-separated set of watchlist IDs. isArray: true name: watchlist_ids - description: Terms to search within Dataminr Alerts. name: query - description: It points to a cursor that you want any alerts after. Note that only one of "from" or "to" can be included per request. name: from - description: It points to a cursor that you want any alerts before. Note that only one of "from" and "to" can be included per request. name: to - defaultValue: "40" description: Maximum number of alerts to return. 100 is maximum value. name: num - auto: PREDEFINED defaultValue: "yes" description: A Boolean indicating that If user does not provide watchlist IDs then it should use configured watchlist names with query parameter. name: use_configured_watchlist_names predefined: - yes - no description: "Retrieves the alerts as per the provided watchlist_ids or query or configured watchlist_names parameter in integration.\n\nNote: The \"from\" and \"to\" arguments should not be included on the first execution, there will not be any \"from\" or \"to\" cursor to reference. Only subsequent calls should contain those parameters." name: dataminrpulse-alerts-get outputs: - contextPath: DataminrPulse.Alerts.alertId description: The unique identifier of the alert. type: String - contextPath: DataminrPulse.Alerts.alertTimestamp description: The timestamp when the alert was generated. type: String - contextPath: DataminrPulse.Alerts.alertType.name description: The type of alert. type: String - contextPath: DataminrPulse.Alerts.alertTopics.id description: The topic ID associated with the alert. type: String - contextPath: DataminrPulse.Alerts.alertTopics.name description: The topic name associated with the alert. type: String - contextPath: DataminrPulse.Alerts.alertCompanies.name description: The company name is related to the alert. type: String - contextPath: DataminrPulse.Alerts.alertCompanies.ticker description: The stock ticker symbol of the company. type: String - contextPath: DataminrPulse.Alerts.alertSectors.name description: The sector name associated with the alert. type: String - contextPath: DataminrPulse.Alerts.headline description: The main headline or summary of the alert. type: String - contextPath: DataminrPulse.Alerts.subHeadline.title description: The subheadline title. type: String - contextPath: DataminrPulse.Alerts.subHeadline.content description: The subheadline detailed content. type: String - contextPath: DataminrPulse.Alerts.publicPost.timestamp description: The timestamp of the original public post. type: String - contextPath: DataminrPulse.Alerts.publicPost.href description: The source URL of the public post. type: String - contextPath: DataminrPulse.Alerts.publicPost.text description: The text of the public post. type: String - contextPath: DataminrPulse.Alerts.publicPost.channels description: The channels or platforms where the post appeared. type: String - contextPath: DataminrPulse.Alerts.publicPost.media.type description: The type of attached media. type: String - contextPath: DataminrPulse.Alerts.publicPost.media.href description: The media hyperlink. type: String - contextPath: DataminrPulse.Alerts.publicPost.englishText description: The english text of the public post. type: String - contextPath: DataminrPulse.Alerts.eventCorroboration.timestamp description: The timestamp of the event corroboration. type: String - contextPath: DataminrPulse.Alerts.eventCorroboration.summary.title description: The title of the event corroboration summary. type: String - contextPath: DataminrPulse.Alerts.eventCorroboration.summary.content description: The content of the event corroboration summary. type: String - contextPath: DataminrPulse.Alerts.estimatedEventLocation.name description: The estimated name or location of the event. type: String - contextPath: DataminrPulse.Alerts.estimatedEventLocation.coordinates description: The coordinates of the estimated event location. type: Number - contextPath: DataminrPulse.Alerts.estimatedEventLocation.probabilityRadius description: The probability radius of the estimated location. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.locationAssets.name description: The name of the customer location asset. type: String - contextPath: DataminrPulse.Alerts.assetsMatched.locationAssets.lng description: The longitude of the asset. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.locationAssets.lat description: The latitude of the asset. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.locationAssets.distanceFromEventLocation description: The distance between the asset and the alert's estimated event location. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.locationAssets.locationGroups.name description: The name of the location group. type: String - contextPath: DataminrPulse.Alerts.assetsMatched.thirdPartyAssets.name description: The name of the third-party asset. type: String - contextPath: DataminrPulse.Alerts.assetsMatched.thirdPartyAssets.customerProvidedId description: The customer-provided unique ID for the asset. type: String - contextPath: DataminrPulse.Alerts.assetsMatched.travelSegments.name description: The name of the travel segment location or asset. type: String - contextPath: DataminrPulse.Alerts.assetsMatched.travelSegments.lng description: The longitude of the asset. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.travelSegments.lat description: The latitude of the asset. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.travelSegments.distanceFromEventLocation description: The distance between the asset and the alert's estimated event location. type: Number - contextPath: DataminrPulse.Alerts.assetsMatched.travelSegments.travelType description: The category of travel segment, such as HOTEL or FLIGHT. type: String - contextPath: DataminrPulse.Alerts.intelAgents.summary.type description: The type of the intelligence agent summary. type: String - contextPath: DataminrPulse.Alerts.intelAgents.summary.title description: The title of the intelligence agent summary. type: String - contextPath: DataminrPulse.Alerts.intelAgents.summary.content description: The content of the intelligence agent summary. type: String - contextPath: DataminrPulse.Alerts.intelAgents.version description: The version of the intelligence agent. type: String - contextPath: DataminrPulse.Alerts.intelAgents.timestamp description: The timestamp of the intelligence agent. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.name description: The name of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.type description: The type of discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.summary description: The summary of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.publishedDate description: The published date of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.products.productName description: The product name of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.products.productVendor description: The product vendor of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.products.productVersion description: The product version of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.knownExploitedDate description: The known exploited date of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.epssScore description: The EPSS score of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.cvss description: The CVSS score of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.exploitable description: The exploitability of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.exploitPocLinks description: The exploit proof of concept links of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.affectedOperatingSystems description: The affected operating systems of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.yaraRules description: The YARA rules of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.aliases description: The aliases of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.ttps.topLevelTechniqueName description: The top-level technique name of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.ttps.techniqueName description: The technique name of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.ttps.techniqueId description: The technique ID of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.ttps.tacticName description: The tactic name of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.countryOfOrigin description: The country of origin of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.threatActors description: The threat actors related to malware of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.websiteUrl description: The website URL associated with the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.locations.address description: The address of the location associated with the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.industry description: The industry in which the discovered entity operates. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.primaryLocation.address description: The primary address of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.organizationType description: The type of organization associated with the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.headOfOrganization description: The individual who heads the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.executives description: The executives associated with the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.operatingRegions description: The regions in which the discovered entity operates. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.address description: The address information of the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.ownedBy description: The entity or individual that owns the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.operatedBy description: The entity or individual that operates the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.country description: The country in which the discovered entity is located. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.timezone.utcOffsetSeconds description: The UTC offset in seconds for the entity's timezone. type: Number - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.timezone.displayName description: The display name of the entity's timezone. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.stateOrProvince description: The state or province where the discovered entity is located. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.population description: The population associated with the discovered entity's location. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.travelAdvisories.issuingCountry description: The country issuing the travel advisory. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.travelAdvisories.issuedDate description: The date when the travel advisory was issued. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.travelAdvisories.issuedCountry description: The country for which the travel advisory was issued. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.travelAdvisories.advisoryText description: The text content of the travel advisory. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.president description: The president associated with the discovered entity's country or organization. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.officialLanguages description: The official languages spoken in the entity's location. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.capital description: The capital city associated with the discovered entity's country. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.locationType description: The type of location represented by the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.managedBy description: The entity or individual responsible for managing the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.nationalities description: The nationalities associated with the discovered entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.pastRoles.tenureStartDate description: The start date of the entity's past role. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.pastRoles.tenureEndDate description: The end date of the entity's past role. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.pastRoles.roleName description: The name of the past role associated with the entity. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.currentRoles.tenureStartDate description: The start date of the entity's current role. type: String - contextPath: DataminrPulse.Alerts.intelAgents.discoveredEntities.currentRoles.roleName description: The name of the current role associated with the entity. type: String - contextPath: DataminrPulse.Alerts.liveBrief.summary description: The live brief summary. type: String - contextPath: DataminrPulse.Alerts.liveBrief.version description: The live brief version. type: String - contextPath: DataminrPulse.Alerts.liveBrief.timestamp description: The live brief timestamp. type: String - contextPath: DataminrPulse.Alerts.dataminrAlertUrl description: The Dataminr alert detail URL. type: String - contextPath: DataminrPulse.Alerts.alertReferenceTerms.text description: The reference keywords or terms for the alert. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.id description: The vulnerability ID. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.publishedDate description: The published date of the vulnerability. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.knownExploitedDate description: The known exploited date of the vulnerability. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.epssScore description: The EPSS score of the vulnerability. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.cvss description: The CVSS score of the vulnerability. type: Number - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.products.productName description: The vulnerable product name. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.products.productVendor description: The vulnerable product vendor. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.products.productVersion description: The vulnerable product version. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.vulnerabilities.exploitPocLinks description: The exploit PoC links for the vulnerability. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.URL.name description: The related URL name. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.addresses.ip description: The IP address involved. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.addresses.port description: The port number involved. type: Number - contextPath: DataminrPulse.Alerts.metadata.cyber.addresses.version description: The protocol or software version of the address. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.addresses.type description: The type of the address. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.malware.name description: The malware name. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.malware.affectedOperatingSystems description: The affected operating systems. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.threatActors.name description: The threat actor name. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.threatActors.aliases description: The threat actor aliases. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.threatActors.countriesOfOrigin description: The countries of origin of the threat actor. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.asOrgs.asn description: The autonomous system number. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.asOrgs.asOrg description: The autonomous system organization. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.hashValues.value description: The hash value. type: String - contextPath: DataminrPulse.Alerts.metadata.cyber.hashValues.type description: The hash type. type: String - contextPath: DataminrPulse.Alerts.listsMatched.id description: The matched list ID. type: String - contextPath: DataminrPulse.Alerts.listsMatched.name description: The matched list name. type: String - contextPath: DataminrPulse.Alerts.listsMatched.subType description: The subtype of the matched list. type: String - contextPath: DataminrPulse.Alerts.listsMatched.topicIds description: The topic IDs of the matched list. type: String - contextPath: DataminrPulse.Alerts.linkedAlerts.count description: The count of linked alerts. type: Number - contextPath: DataminrPulse.Alerts.linkedAlerts.parentAlertId description: The parent alert ID of the linked alert. type: String - contextPath: DataminrPulse.Cursor.from description: The "from" points to a cursor that specifies the alerts you want after it. type: String - contextPath: DataminrPulse.Cursor.to description: The "to" points to a cursor that specifies the alerts you want before it. type: String - description: Enrich the "Dataminr Pulse Vulnerability Indicator" custom indicator with relevant data. name: dataminrpulse-vulnerability-enrich hidden: true arguments: - description: Raw response of the “vulnerabilities” coming through the “dataminrpulse-alerts-get” command. required: true name: vulnerability_json_data outputs: - contextPath: DataminrPulse.Vulnerability.id description: The vulnerability ID. type: String - contextPath: DataminrPulse.Vulnerability.cvss description: The CVSS score of the vulnerability. type: Number - contextPath: DataminrPulse.Vulnerability.epssScore description: The EPSS score of the vulnerability. type: Number - contextPath: DataminrPulse.Vulnerability.products.productName description: The vulnerable product name. type: String - contextPath: DataminrPulse.Vulnerability.products.productVendor description: The vulnerable product vendor. type: String - contextPath: DataminrPulse.Vulnerability.products.productVersion description: The vulnerable product version. type: String - contextPath: DataminrPulse.Vulnerability.exploitPocLinks description: The exploit PoC links for the vulnerability. type: String - contextPath: DataminrPulse.Vulnerability.summary description: The summary of the vulnerability. type: String - contextPath: DataminrPulse.Vulnerability.type description: The type of the indicator. type: String - contextPath: DataminrPulseVulnerabilityIndicator.value description: The value of the indicator. type: String - contextPath: DataminrPulseVulnerabilityIndicator.type description: The type of the indicator. type: String - contextPath: DataminrPulseVulnerabilityIndicator.cvss description: The CVSS score of the vulnerability. type: Number - contextPath: DataminrPulseVulnerabilityIndicator.epssScore description: The EPSS score of the vulnerability. type: Number - contextPath: DataminrPulseVulnerabilityIndicator.products.productName description: The vulnerable product name. type: String - contextPath: DataminrPulseVulnerabilityIndicator.products.productVendor description: The vulnerable product vendor. type: String - contextPath: DataminrPulseVulnerabilityIndicator.products.productVersion description: The vulnerable product version. type: String - contextPath: DataminrPulseVulnerabilityIndicator.exploitPocLinks description: The exploit PoC links for the vulnerability. type: String - contextPath: DataminrPulseVulnerabilityIndicator.summary description: The summary of the vulnerability. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - description: Enrich the "Dataminr Pulse Malware Indicator" custom indicator with relevant data. name: dataminrpulse-malware-enrich hidden: true arguments: - description: Raw response of the “malware” coming through the “dataminrpulse-alerts-get” command. required: true name: malware_json_data outputs: - contextPath: DataminrPulse.Malware.name description: The malware name. type: String - contextPath: DataminrPulse.Malware.type description: The type of the indicator. type: String - contextPath: DataminrPulse.Malware.affectedOperatingSystems description: The affected operating systems. type: String - contextPath: DataminrPulse.Malware.summary description: The summary of the malware. type: String - contextPath: DataminrPulse.Malware.yaraRules description: The YARA rules for the malware. type: String - contextPath: DataminrPulseMalwareIndicator.value description: The value of the indicator. type: String - contextPath: DataminrPulseMalwareIndicator.type description: The type of the indicator. type: String - contextPath: DataminrPulseMalwareIndicator.affectedOperatingSystems description: The affected operating systems. type: String - contextPath: DataminrPulseMalwareIndicator.yaraRules description: The YARA rules for the malware. type: String - contextPath: DataminrPulseMalwareIndicator.summary description: The summary of the malware. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - description: Enrich the "Dataminr Pulse Threat Actor Indicator" custom indicator with relevant data. name: dataminrpulse-threat-actor-enrich hidden: true arguments: - description: Raw response of the “threat actor” coming through the “dataminrpulse-alerts-get” command. required: true name: threat_actor_json_data outputs: - contextPath: DataminrPulse.ThreatActor.name description: The threat actor name. type: String - contextPath: DataminrPulse.ThreatActor.type description: The type of the indicator. type: String - contextPath: DataminrPulse.ThreatActor.summary description: The summary of the threat actor. type: String - contextPath: DataminrPulse.ThreatActor.aliases description: The aliases of the threat actor. type: String - contextPath: DataminrPulse.ThreatActor.ttps description: The TTPs of the threat actor. type: String - contextPath: DataminrPulse.ThreatActor.countryOfOrigin description: The country of origin of the threat actor. type: String - contextPath: DataminrPulseThreatActorIndicator.value description: The value of the indicator. type: String - contextPath: DataminrPulseThreatActorIndicator.type description: The type of the indicator. type: String - contextPath: DataminrPulseThreatActorIndicator.aliases description: The aliases of the threat actor. type: String - contextPath: DataminrPulseThreatActorIndicator.ttps description: The TTPs of the threat actor. type: String - contextPath: DataminrPulseThreatActorIndicator.countryOfOrigin description: The country of origin of the threat actor. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string isfetch: true runonce: false script: '-' type: python subtype: python3 dockerimage: demisto/python3:3.12.13.10116658 fromversion: 6.10.0 marketplaces: - xsoar - marketplacev2 - platform tests: - No tests (auto formatted) defaultmapperin: Dataminr Pulse - Incoming Mapper