name: ETDXsoarConnector
display: Cisco ETD Connector
category: Analytics & SIEM
commonfields:
  id: ETDXsoarConnector
  version: -1
description: Fetches Cisco Email Threat Defense (ETD) message events and creates incidents.
provider: Cisco
script:
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10404775
  isfetch: true
  commands:
  - name: cisco-etd-move-message
    description: Reclassifies and remediates an ETD message.
    arguments:
    - name: message_id
      description: The ETD message ID.
      required: true
    - name: verdict
      description: The new verdict.
      required: true
    - name: folder
      description: The new folder action.
      required: true
    outputs:
    - contextPath: ETD.Message.ID
      description: The message ID.
      type: String
    - contextPath: ETD.Message.Verdict
      description: The updated verdict.
      type: String
    - contextPath: ETD.Message.Folder
      description: The updated folder.
      type: String
sectionorder:
- Connect
- Collect
configuration:
- display: ETD Base URL
  name: etd_base_url
  type: 0
  required: true
  section: Connect
- displaypassword: API Key
  name: api_key
  type: 9
  required: true
  section: Connect
- display: Client ID
  name: client_id
  type: 0
  required: true
  section: Connect
- displaypassword: Client Secret
  name: client_secret
  type: 9
  required: true
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- name: insecure
  display: Trust any certificate (not secure)
  required: false
  type: 8
  advanced: true
  section: Connect
- display: First Fetch Time
  name: first_fetch
  type: 0
  defaultvalue: 3 days
  required: false
  section: Collect
- display: Fetch incidents
  name: isFetch
  type: 8
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  type: 19
  defaultvalue: 15
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  defaultvalue: ETD Malicious Email
  required: false
  section: Collect
- display: Max fetch
  name: max_fetch
  type: 0
  required: false
  defaultvalue: '100'
  section: Collect
fromversion: 6.10.0
marketplaces:
- xsoar
tests:
- Test ETDXsoarConnector