sectionorder: - Connect - Collect commonfields: id: Ignite version: -1 name: Ignite display: Flashpoint Ignite category: Data Enrichment & Threat Intelligence provider: Flashpoint description: Use the Ignite integration to reduce business risk. Ignite allows users to ingest alerts and compromised credentials as incident alerts and executes commands such as search intelligence report, ip, url, get events, and more. configuration: - display: Fetch incidents name: isFetch type: 8 required: false section: Collect - defaultvalue: '1' display: Incidents Fetch Interval name: incidentFetchInterval required: false type: 19 section: Collect - display: Incident type name: incidentType type: 13 required: false defaultvalue: 'Flashpoint Compromised Credentials' section: Collect - display: Server URL additionalinfo: Server URL to connect to Ignite. name: url defaultvalue: "https://api.flashpoint.io" type: 0 required: true section: Connect - displaypassword: API Key additionalinfo: API key used for secure communication with the Ignite platform. name: credentials hiddenusername: true required: true type: 9 section: Connect - additionalinfo: The maximum limit is 200 for alerts and compromised credentials. defaultvalue: '15' display: Maximum number of incidents per fetch name: max_fetch type: 0 required: false section: Collect - additionalinfo: 'Date or relative timestamp to start fetching the incidents from. (Formats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ, etc.).' defaultvalue: 3 days display: First fetch time name: first_fetch type: 0 required: false section: Collect - additionalinfo: Whether to fetch the Ignite alerts or the compromised credentials. Defaults to "Compromised Credentials" if nothing selected. defaultvalue: Compromised Credentials display: Fetch Type name: fetch_type options: - 'Compromised Credentials' - 'Alerts' type: 15 required: false section: Collect - additionalinfo: Set the default severity for the incidents using this instance. defaultvalue: Unknown display: Severity for Incidents name: severity options: - Unknown - Informational - Low - Medium - High - Critical type: 15 required: false section: Collect - additionalinfo: Filters the incoming alerts with the provided alert status. display: Alert Status name: status options: - Archived - Starred - Sent - None type: 15 required: false section: Collect - additionalinfo: Filters the incoming alerts with the origin of the alert. display: Alert Origin name: origin options: - Searches - Assets type: 15 required: false section: Collect - additionalinfo: Filters the incoming alerts with the source of the alert. display: Alert Sources name: sources options: - Github - Gitlab - Bitbucket - Communities - Images - Marketplaces - Reports - Vulnerabilities type: 16 required: false section: Collect - additionalinfo: Adds the 'is_fresh' flag to compromised credential queries so it only ingests username/password combinations if they haven't been seen before. defaultvalue: 'true' display: Fetch fresh compromised credentials alerts name: is_fresh_compromised_credentials type: 8 required: false section: Collect - additionalinfo: Filters the incoming compromised credentials alerts with passwords having lowercase letters. display: Fetch compromised credentials alerts having lowercase in password name: password_has_lowercase options: - 'False' - 'True' type: 15 required: false section: Collect - additionalinfo: Filters the incoming compromised credentials alerts with passwords having uppercase letters. display: Fetch compromised credentials alerts having uppercase in password name: password_has_uppercase options: - 'False' - 'True' type: 15 required: false section: Collect - additionalinfo: Filters the incoming compromised credentials alerts with passwords having numbers. display: Fetch compromised credentials alerts having numbers in password name: password_has_number options: - 'False' - 'True' type: 15 required: false section: Collect - additionalinfo: Filters the incoming compromised credentials alerts with passwords having symbols. display: Fetch compromised credentials alerts having symbol in password name: password_has_symbol options: - 'False' - 'True' type: 15 required: false section: Collect - additionalinfo: Filters the incoming compromised credentials alerts with passwords has minimum length. display: Fetch compromised credentials alerts having minimum length of password name: password_min_length type: 0 required: false section: Collect - additionalinfo: Reliability of the source providing the intelligence data. defaultvalue: B - Usually reliable display: Source Reliability name: integrationReliability options: - A+ - 3rd party enrichment - A - Completely reliable - B - Usually reliable - C - Fairly reliable - D - Not usually reliable - E - Unreliable - F - Reliability cannot be judged type: 15 required: false section: Collect - defaultvalue: indicatorType name: feedExpirationPolicy display: '' options: - never - interval - indicatorType - suddenDeath type: 17 required: false section: Collect - defaultvalue: '20160' name: feedExpirationInterval display: '' type: 1 required: false section: Collect - defaultvalue: 'true' additionalinfo: Create relationships between indicators as part of enrichment. display: Create relationships name: create_relationships type: 8 required: false section: Collect - additionalinfo: Whether to use exact matching for indicator values by default in enrichment commands (ip, domain, file, and url). This behavior can be overridden for individual commands using the exact_match argument. display: Enable Exact Match for IOC Enrichment name: ioc_enrichment_exact_match type: 8 required: false section: Collect - additionalinfo: >- Maximum number of entries stored per reputation command result for both relationships (e.g. related IPs) and enrichments (e.g. domains, emails, CVEs). Lowering this value improves performance and reduces context size, but may omit some details. Raising it preserves more details at the cost of larger context payloads and potential performance degradation. Default is 50. defaultvalue: '50' display: Reputation commands context limit name: reputation_enrichments_limit type: 0 required: false section: Connect advanced: true - additionalinfo: >- The maximum number of characters retained from the message field of a community search result returned by the ip command. Lowering this value reduces context payload size, while raising it preserves more of the original content. defaultvalue: '500' display: Community search message max length name: message_max_length type: 0 required: false section: Connect advanced: true - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect advanced: true - display: Use system proxy settings name: proxy type: 8 required: false section: Connect advanced: true script: commands: - name: flashpoint-ignite-intelligence-report-search arguments: - name: report_search required: true description: Search report using keyword or text. outputs: - contextPath: Ignite.Report.NotifiedAt description: Notify date of report. type: string - contextPath: Ignite.Report.PlatformUrl description: Platform URL of the report. Used to help redirect the Ignite platform. type: string - contextPath: Ignite.Report.PostedAt description: Posted date of the report. type: number - contextPath: Ignite.Report.Summary description: Summary of the report. type: string - contextPath: Ignite.Report.Title description: Title of the report. type: string - contextPath: Ignite.Report.UpdatedAt description: Last updated date of the report. type: string - contextPath: Ignite.Report.ReportId description: Unique ID of the report. type: string description: Search for the Intelligence Reports using a keyword. - name: flashpoint-ignite-compromised-credentials-list arguments: - description: |- Filters the data based on the start date of the breach (UTC). Note: Will consider current time as default for end_date if start_date is initialized. Formats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ, etc. name: start_date - description: |- Filters the data based on the end date of the breach (UTC). Note: Requires start_date along with the given argument. Formats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ, etc. name: end_date - auto: PREDEFINED description: |- Filters the compromised credential's breach data by either created or first observed date. Note: Requires the argument value for at least 'start_date' and 'end_date'. name: filter_date predefined: - created_at - first_observed_at - defaultValue: '50' description: 'The maximum number of result objects to return per page. Note: The maximum value is 1,000.' name: page_size - defaultValue: '1' description: 'Specify a page number to retrieve the compromised credentials. Note: The multiplication of page_size and page_number parameters cannot exceed 10,000.' name: page_number - auto: PREDEFINED description: "Sort the compromised credential's breach data by either created or first observed date. Note: Will consider ascending as default for sort_order if sort_date is initialized." name: sort_date predefined: - created_at - first_observed_at - auto: PREDEFINED description: 'Specify the order to sort the data in. Note: Requires sort_date along with the given argument.' name: sort_order predefined: - asc - desc - auto: PREDEFINED description: 'Whether to fetch the fresh compromised credentials or not.' name: is_fresh predefined: - 'true' - 'false' outputs: - contextPath: Ignite.CompromisedCredential._id description: ID of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.affected_domain description: Affected domain of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.basetypes description: The array contains the underlying type of the credentials object, in this case ["credential-sighting"]. type: Unknown - contextPath: Ignite.CompromisedCredential._source.body.raw description: This is the raw content captured from the breach Flashpoint discovered. type: String - contextPath: Ignite.CompromisedCredential._source.breach._header description: This is the breach header object. type: String - contextPath: Ignite.CompromisedCredential._source.breach.basetypes description: Array containing the underlying base type of the breach object, i.e., ["breach"]. type: Unknown - contextPath: Ignite.CompromisedCredential._source.breach.breach_type description: Constant for future use. type: String - contextPath: Ignite.CompromisedCredential._source.breach.created_at.date-time description: The datetime when the source breach was created, formatted as YYYY-mm-ddTHH:MM:SSZ. type: Date - contextPath: Ignite.CompromisedCredential._source.breach.created_at.timestamp description: The UNIX timestamp when the source breach was created. type: Number - contextPath: Ignite.CompromisedCredential._source.breach.first_observed_at.date-time description: Datetime when the source breach was first observed, formatted as YYYY-mm-ddTHH:MM:SSZ. type: Date - contextPath: Ignite.CompromisedCredential._source.breach.first_observed_at.timestamp description: The UNIX timestamp when the source breach was first observed. type: Number - contextPath: Ignite.CompromisedCredential._source.breach.fpid description: Flashpoint ID of the breach. type: String - contextPath: Ignite.CompromisedCredential._source.breach.source description: Data source of breach (i.e., Analyst Research, CredentialStealer, etc.). type: String - contextPath: Ignite.CompromisedCredential._source.breach.source_type description: Type of source of the breach. type: String - contextPath: Ignite.CompromisedCredential._source.breach.title description: Title of the breach. type: String - contextPath: Ignite.CompromisedCredential._source.breach.victim description: Victim of the breach. type: String - contextPath: Ignite.CompromisedCredential._source.credential_record_fpid description: The Flashpoint ID of the associated record object. Used to retrieve sightings for a credential. type: String - contextPath: Ignite.CompromisedCredential._source.customer_id description: Customer ID of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.domain description: The domain object extracted off of the email address. type: String - contextPath: Ignite.CompromisedCredential._source.email description: The email address for the compromised credential. type: String - contextPath: Ignite.CompromisedCredential._source.username description: The username for the compromised credential. type: String - contextPath: Ignite.CompromisedCredential._source.extraction_id description: Extraction ID of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.extraction_record_id description: Extraction record ID of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.fpid description: The Flashpoint ID of this credentials object. type: String - contextPath: Ignite.CompromisedCredential._source.header_.indexed_at description: Timestamp for when this document was indexed into the Flashpoint database. type: String - contextPath: Ignite.CompromisedCredential._source.header_.pipeline_duration description: Pipeline duration header information of the IoC. type: String - contextPath: Ignite.CompromisedCredential._source.is_fresh description: "\"true\" if the credential has not been seen before, and it hasn't been marked \"not fresh\" by an analyst. (Historical breaches are not \"fresh\".)." type: Boolean - contextPath: Ignite.CompromisedCredential._source.last_observed_at.date-time description: If exists, time object for when the credential was previously observed. Datetime object formatted as YYYY-mm-ddTHH:MM:SSZ. type: Date - contextPath: Ignite.CompromisedCredential._source.last_observed_at.timestamp description: The UNIX timestamp when the source breach was first observed. type: Number - contextPath: Ignite.CompromisedCredential._source.password description: The password for the credential (in plain text, if possible). type: String - contextPath: Ignite.CompromisedCredential._source.password_complexity.has_lowercase description: Whether lowercase letters are present. type: Boolean - contextPath: Ignite.CompromisedCredential._source.password_complexity.has_number description: Whether numbers are present. type: Boolean - contextPath: Ignite.CompromisedCredential._source.password_complexity.has_symbol description: Whether symbols are present. type: Boolean - contextPath: Ignite.CompromisedCredential._source.password_complexity.has_uppercase description: Whether uppercase letters are present. type: Boolean - contextPath: Ignite.CompromisedCredential._source.password_complexity.length description: Integer value that represents the number of characters in the password. type: Number - contextPath: Ignite.CompromisedCredential._source.password_complexity.probable_hash_algorithms description: List of possible hash algorithms suspected based on the text pattern of the password. (May include values like "MD5", "SHA-1", "SHA-256", "bcrypt", etc.) type: Unknown - contextPath: Ignite.CompromisedCredential._source.times_seen description: Integer representing the number of times the credential has been seen at Flashpoint. type: Number - contextPath: Ignite.CompromisedCredential._type description: Type of the IoC. type: String - contextPath: Ignite.CompromisedCredential.matched_queries description: Matching queries of the IoC. type: Unknown - contextPath: Ignite.CompromisedCredential.sort description: Sort value of the IoC. type: Unknown description: Retrieves the compromised credentials based on the filter values provided in the command arguments. - name: flashpoint-ignite-event-list arguments: - name: time_period description: The time period for the search. - name: report_fpid description: The Flashpoint report ID. To retrieve the Flashpoint report ID, run the flashpoint-ignite-intelligence-related-report-list command. - name: limit description: The maximum number of records. defaultValue: "10" - name: attack_ids description: A comma-separated list of attack IDs for which to search. Attack IDs can be found in event information or on the Ignite platform by filtering events by attack IDs. outputs: - contextPath: Ignite.Event.EventCreatorEmail description: The email of the event creator. type: string - contextPath: Ignite.Event.EventId description: The ID of the event. type: string - contextPath: Ignite.Event.UUID description: The UUID of the event. type: string - contextPath: Ignite.Event.Href description: The hyperlink of the event. type: string - contextPath: Ignite.Event.MalwareDescription description: The description of the malware. type: string - contextPath: Ignite.Event.Name description: The name of the event. type: string - contextPath: Ignite.Event.ObservedTime description: The date that the event was triggered. type: string - contextPath: Ignite.Event.Tags description: The tags of the event. type: string description: Searches for events within the specified time period, the Flashpoint report ID, or attack IDs. - name: flashpoint-ignite-event-get arguments: - name: event_id required: true description: The FPID or UUID that identifies a particular event. The event ID can be fetched from the output context path (Ignite.Event.EventId) of the flashpoint-ignite-event-list command, or the indicator reputation command response or some other investigation. outputs: - contextPath: Ignite.Event.EventCreatorEmail description: The email of the event creator. type: string - contextPath: Ignite.Event.EventId description: The ID of the event. type: string - contextPath: Ignite.Event.UUID description: The UUID of the event. type: string - contextPath: Ignite.Event.Href description: The hyperlink of the event. type: string - contextPath: Ignite.Event.MalwareDescription description: The description of the malware. type: string - contextPath: Ignite.Event.Name description: The name of the event. type: string - contextPath: Ignite.Event.ObservedTime description: The date that the event was triggered. type: string - contextPath: Ignite.Event.Tags description: The tags of the event. type: string description: Retrieves the details of a single event using event FPID or UUID. - name: flashpoint-ignite-intelligence-report-get arguments: - name: report_id required: true description: The ID of the report for which the details are to be fetched. The report ID can be retrieved from the output context path (Ignite.Report.ReportId) of the flashpoint-ignite-intelligence-report-search command or some other investigation. outputs: - contextPath: Ignite.Report.NotifiedAt description: Notify date of the report. type: string - contextPath: Ignite.Report.PlatformUrl description: Platform URL of the report. Used to help redirect the Ignite platform. type: string - contextPath: Ignite.Report.PostedAt description: Posted date of the report. type: number - contextPath: Ignite.Report.Summary description: Summary of the report. type: string - contextPath: Ignite.Report.Title description: Title of the report. type: string - contextPath: Ignite.Report.UpdatedAt description: Last updated date of the report. type: string - contextPath: Ignite.Report.ReportId description: Unique ID of the report. type: string - contextPath: Ignite.Report.Tags description: Tags of the report. type: string description: Get single report details using the report id. - name: flashpoint-ignite-intelligence-related-report-list arguments: - name: report_id required: true description: The report-id of the report of which the related reports are to be fetched. The report id can be known from output context path (Ignite.Report.ReportId) of flashpoint-ignite-intelligence-report-search command or some other investigation. outputs: - contextPath: Ignite.Report.NotifiedAt description: Notify date of report. type: string - contextPath: Ignite.Report.PlatformUrl description: Platform URL of the report. Used to help redirect the Ignite platform. type: string - contextPath: Ignite.Report.PostedAt description: Posted date of the report. type: number - contextPath: Ignite.Report.Summary description: Summary of the report. type: string - contextPath: Ignite.Report.Title description: Title of the report. type: string - contextPath: Ignite.Report.UpdatedAt description: Last updated date of the report. type: string - contextPath: Ignite.Report.ReportId description: Unique ID of the report. type: string description: List related reports for a particular report using the report ID. - name: flashpoint-ignite-alert-list arguments: - name: size defaultValue: 10 description: The number of alerts to return. - name: created_after description: 'Returns alerts that occurred after the specified date. (Formats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ, etc).' - name: created_before description: 'Returns alerts that occurred before the specified date. (Formats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ, etc).' - name: cursor description: The cursor to retrieve next page data. Used for pagination only. The value of the cursor can be found from the output context path (Ignite.PageToken.Alert.cursor) or the HR output of the flashpoint-ignite-alert-list command. - auto: PREDEFINED name: status description: Filter alerts by status. predefined: - Archived - Starred - Sent - None - auto: PREDEFINED name: origin description: Filter alerts by origin. predefined: - Searches - Assets - auto: PREDEFINED name: sources description: Filter alerts by source. predefined: - Github - Gitlab - Bitbucket - Communities - Images - Marketplaces - Reports - Vulnerabilities isArray: true - name: tags description: A comma-separated list of alerts filtered by tags. isArray: true - name: asset_type description: Filter alerts by asset type. - name: asset_ip description: Filter alerts by asset IP. - name: asset_ids description: A comma-separated list of alerts filtered by asset IDs. isArray: true - name: query_ids description: A comma-separated list of alerts filtered by search IDs. isArray: true outputs: - contextPath: Ignite.Alert.id description: The unique identifier for the alert. type: String - contextPath: Ignite.Alert.resource.id description: The identifier for the resource associated with the alert. type: String - contextPath: Ignite.Alert.resource.basetypes description: Base types of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.container.container.name description: The name of the nested container within the resource that holds the alert. type: String - contextPath: Ignite.Alert.resource.container.container.native_id description: The native identifier for the nested container within the resource. type: String - contextPath: Ignite.Alert.resource.container.container.title description: The title of the nested container within the resource. type: String - contextPath: Ignite.Alert.resource.container.name description: The name of the container that holds the resource associated with the alert. type: String - contextPath: Ignite.Alert.resource.container.native_id description: The native identifier for the container that holds the resource. type: String - contextPath: Ignite.Alert.resource.container.title description: The title of the container that holds the resource associated with the alert. type: String - contextPath: Ignite.Alert.resource.created_at.date-time description: The date and time when the resource associated with the alert was created in ISO 8601 format. type: String - contextPath: Ignite.Alert.resource.created_at.raw description: The raw timestamp or other date-time representation when the resource was created. type: Date - contextPath: Ignite.Alert.resource.created_at.timestamp description: The UNIX timestamp representing when the resource associated with the alert was created. type: Number - contextPath: Ignite.Alert.resource.media_v2.sha1 description: The SHA1 hash of the media file related to the alert. type: String - contextPath: Ignite.Alert.resource.media_v2.phash description: The perceptual hash (pHash) of the media file, used to find visually similar images. type: String - contextPath: Ignite.Alert.resource.media_v2.media_type description: The type of media (e.g., image, video) associated with the alert. type: String - contextPath: Ignite.Alert.resource.media_v2.mime_type description: The MIME type of the media file associated with the alert. type: String - contextPath: Ignite.Alert.resource.media_v2.storage_uri description: The storage URI where the media file related to the alert is located. type: String - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.racy description: A score indicating the likelihood that the image contains racy content. type: Number - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.spoof description: A score indicating the likelihood that the image contains spoofed content. type: Number - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.medical description: A score indicating the likelihood that the image contains medical content. type: Number - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.adult description: A score indicating the likelihood that the image contains sexual content. type: Number - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.adult description: A score indicating the likelihood that the image contains adult content. type: Number - contextPath: Ignite.Alert.resource.media_v2.image_enrichment.enrichments.v1.image-analysis.safe_search.violence description: A score indicating the likelihood that the image contains violent content. type: Number - contextPath: Ignite.Alert.resource.title description: The title of the resource associated with the alert. type: String - contextPath: Ignite.Alert.resource.section description: The section of the platform or service where the resource is categorized or located. type: String - contextPath: Ignite.Alert.resource.repo description: Repository of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.snippet description: Snippet of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.source description: Source of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.url description: URL of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.owner description: Owner of the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.file description: File associated with the resource related to the alert. type: String - contextPath: Ignite.Alert.resource.parent_basetypes description: The parent base types that categorize the resource. type: String - contextPath: Ignite.Alert.resource.site_actor.names.handle description: The username or handle of the site actor related to the resource. type: String - contextPath: Ignite.Alert.resource.site_actor.native_id description: The native identifier for the site actor associated with the resource. type: String - contextPath: Ignite.Alert.resource.sort_date description: The date and time used for sorting the resource, typically the creation or publication date. type: Date - contextPath: Ignite.Alert.resource.site.title description: The title of the site or platform associated with the resource. type: String - contextPath: Ignite.Alert.resource.shodan_host.asn description: The ASN (Autonomous System Number) of the Shodan host. type: String - contextPath: Ignite.Alert.resource.shodan_host.country description: The country of the Shodan host. type: String - contextPath: Ignite.Alert.resource.shodan_host.org description: The organization of the Shodan host. type: String - contextPath: Ignite.Alert.resource.shodan_host.shodan_url description: The Shodan URL of the Shodan host. type: String - contextPath: Ignite.Alert.resource.shodan_host.vulns description: The vulnerabilities related to the Shodan host. type: Unknown - contextPath: Ignite.Alert.reason.id description: ID of the reason for the alert. type: String - contextPath: Ignite.Alert.reason.name description: Name of the reason for the alert. type: String - contextPath: Ignite.Alert.reason.text description: Text related to the reason for the alert. type: String - contextPath: Ignite.Alert.reason.origin description: Origin of the reason for the alert. type: String - contextPath: Ignite.Alert.reason.details.sources description: Sources related to the reason for the alert. type: String - contextPath: Ignite.Alert.reason.details.params description: Parameters related to the reason for the alert. type: Unknown - contextPath: Ignite.Alert.reason.details.params.include.date.end description: The end date for the included date range in the alert's reason details. type: String - contextPath: Ignite.Alert.reason.details.params.include.date.label description: The label describing the included date range in the alert's reason details. type: String - contextPath: Ignite.Alert.reason.details.params.include.date.start description: The start date for the included date range in the alert's reason details. type: String - contextPath: Ignite.Alert.reason.details.type description: The type of details related to the reason for the alert. type: String - contextPath: Ignite.Alert.reason.entity.id description: ID of the entity related to the reason for the alert. type: String - contextPath: Ignite.Alert.reason.entity.name description: Name of the entity related to the reason for the alert. type: String - contextPath: Ignite.Alert.reason.entity.type description: Type of the entity related to the reason for the alert. type: String - contextPath: Ignite.Alert.status description: Status of the alert. type: String - contextPath: Ignite.Alert.generated_at description: Date when the alert was generated. type: Date - contextPath: Ignite.Alert.created_at description: Date when the alert was created. type: Date - contextPath: Ignite.Alert.tags description: Tags associated with the alert. type: Unknown - contextPath: Ignite.Alert.highlights.media_v2.image_enrichment.enrichments.v1.image-analysis.text.value description: The text value extracted from the image analysis in the alert's highlights. type: String - contextPath: Ignite.Alert.highlights.ports description: The highlighted ports related to the alert. type: String - contextPath: Ignite.Alert.highlights.services description: The highlighted services related to the alert. type: String - contextPath: Ignite.Alert.highlight_text description: The highlighted text associated with the alert. type: String - contextPath: Ignite.Alert.data_type description: Data type of the alert. type: String - contextPath: Ignite.Alert.parent_data_type description: Parent data type of the alert. type: String - contextPath: Ignite.Alert.source description: Source of the alert. type: String - contextPath: Ignite.Alert.is_read description: Indicates if the alert has been read. type: Boolean - contextPath: Ignite.Alert.highlights.body.text/plain description: The plain text extracted from the body of the content highlighted in the alert. type: String - contextPath: Ignite.Alert.reason.details.params.include.ships_from description: The shipping origin included in the alert's reason details. type: String - contextPath: Ignite.Alert.highlights.snippet description: A snippet or excerpt highlighted in the alert. type: String - contextPath: Ignite.PageToken.Alert.created_after description: Date for filtering alerts created after a specific time. type: Date - contextPath: Ignite.PageToken.Alert.created_before description: Date for filtering alerts created before a specific time. type: Date - contextPath: Ignite.PageToken.Alert.size description: Size of the page for pagination. type: String - contextPath: Ignite.PageToken.Alert.cursor description: Cursor for pagination to retrieve the next set of alerts. type: Date - contextPath: Ignite.PageToken.Alert.name description: The name of the command. type: String description: Retrieves a list of alerts based on the filter values provided in the command arguments. - name: email arguments: - name: email required: true default: true description: A comma-separated list of emails. isArray: true outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Email.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.Email.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.Email.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.Email.Event.Fpid description: The Flashpoint ID of the indicator. type: string - contextPath: Ignite.Email.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.Email.Event.Type description: The indicator type. type: string - contextPath: Ignite.Email.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.Email.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: Account.Description description: The description of the indicator. type: string - contextPath: Account.Email.Name description: Name of indicator. type: string description: Looks up the "Email" type indicator details. The reputation of Email is considered malicious if there's at least one IoC event in the Ignite database matching the Email indicator. deprecated: true - name: filename arguments: - name: filename required: true default: true description: A comma-separated list of filenames. isArray: true outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Filename.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.Filename.Event.Filename description: Filename of the indicator. type: string - contextPath: Ignite.Filename.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.Filename.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.Filename.Event.Fpid description: The Ignite ID of the indicator. type: string - contextPath: Ignite.Filename.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.Filename.Event.Type description: The indicator type. type: string - contextPath: Ignite.Filename.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.Filename.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: Filename.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: Filename.Malicious.Vendor description: Vendor of the malicious filename. type: string - contextPath: Filename.Name description: The filename. type: string - contextPath: Filename.Description description: The description of the indicator. type: string description: Looks up the "Filename" type indicator details. The reputation of Filename is considered malicious if there's at least one IoC event in the Ignite database matching the Filename indicator. deprecated: true - name: ip arguments: - name: ip required: true default: true description: A comma-separated list of IP addresses. isArray: true - name: exact_match required: false description: Whether to perform an exact match on the IP address value. auto: PREDEFINED predefined: - "True" - "False" outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: IP.Address description: The IP address. type: string - contextPath: IP.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: IP.Malicious.Vendor description: The vendor used to calculate the severity of the IP address. type: string - contextPath: IP.Description description: The description of the indicator. type: string - contextPath: Ignite.IP.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.IP.Event.Address description: The IP address of the indicator. type: string - contextPath: Ignite.IP.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.IP.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.IP.Event.Fpid description: The Ignite ID of the indicator. type: string - contextPath: Ignite.IP.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.IP.Event.Type description: The indicator type. type: string - contextPath: Ignite.IP.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.IP.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: IP.Relationships.EntityA description: The source of the relationship. type: string - contextPath: IP.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: IP.Relationships.Relationship description: The name of the relationship. type: string - contextPath: IP.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: IP.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.IP.id description: Unique identifier for the document. type: String - contextPath: Ignite.IP.author description: The author of the document. type: String - contextPath: Ignite.IP.author_id description: The ID of the author of the document. type: String - contextPath: Ignite.IP.date description: The date associated with the document. type: Date - contextPath: Ignite.IP.container_id description: Unique identifier of the container. type: String - contextPath: Ignite.IP.container_title description: Title of the container. type: String - contextPath: Ignite.IP.enrichments.bins description: Number of bins associated with the document. type: Number - contextPath: Ignite.IP.enrichments.bitcoin_addresses description: Bitcoin addresses associated with the document. type: String - contextPath: Ignite.IP.enrichments.cve_ids description: CVE IDs associated with the document. type: String - contextPath: Ignite.IP.enrichments.email_addresses description: Email addresses associated with the document. type: String - contextPath: Ignite.IP.enrichments.ethereum_addresses description: Ethereum addresses associated with the document. type: String - contextPath: Ignite.IP.enrichments.ip_addresses description: IP addresses associated with the document. type: String - contextPath: Ignite.IP.enrichments.location.country_code description: Country code of the location associated with the document. type: String - contextPath: Ignite.IP.enrichments.location.name description: Name of the location associated with the document. type: String - contextPath: Ignite.IP.enrichments.location.lat description: Latitude of the location associated with the document. type: Number - contextPath: Ignite.IP.enrichments.location.long description: Longitude of the location associated with the document. type: Number - contextPath: Ignite.IP.enrichments.monero_addresses description: Monero addresses associated with the document. type: String - contextPath: Ignite.IP.enrichments.social_media_handles description: Social media handles associated with the document. type: String - contextPath: Ignite.IP.enrichments.social_media_sites description: Social media sites associated with the document. type: String - contextPath: Ignite.IP.enrichments.translation.language description: Language of the translation associated with the document. type: String - contextPath: Ignite.IP.enrichments.translation.message description: Translation message associated with the document. type: String - contextPath: Ignite.IP.enrichments.url_domains description: URL domains associated with the document. type: String - contextPath: Ignite.IP.first_observed_at description: The first observed date of the document. type: Date - contextPath: Ignite.IP.last_observed_at description: The last observed date of the document. type: Date - contextPath: Ignite.IP.media.id description: Unique identifier of the media. type: String - contextPath: Ignite.IP.media.file_name description: File name of the media. type: String - contextPath: Ignite.IP.media.mime_type description: MIME type of the media. type: String - contextPath: Ignite.IP.media.phash description: Perceptual hash of the media. type: String - contextPath: Ignite.IP.media.safe_search description: Safe search value of the media. type: String - contextPath: Ignite.IP.media.size description: Size of the media. type: Number - contextPath: Ignite.IP.media.sort_date description: Date used for sorting the media. type: Date - contextPath: Ignite.IP.media.storage_uri description: Storage URI of the media. type: String - contextPath: Ignite.IP.media.type description: Type of the media. type: String - contextPath: Ignite.IP.message description: Message associated with the document. type: String - contextPath: Ignite.IP.message_id description: ID of the message associated with the document. type: String - contextPath: Ignite.IP.native_id description: Native ID of the document. type: String - contextPath: Ignite.IP.message_hash description: Hash of the message associated with the document. type: String - contextPath: Ignite.IP.parent_container_title description: Title of the parent container. type: String - contextPath: Ignite.IP.section description: Section of the document. type: String - contextPath: Ignite.IP.section_id description: ID of the section. type: String - contextPath: Ignite.IP.site description: The site associated with the document. type: String - contextPath: Ignite.IP.site_actor_handle description: Actor handle of the site associated with the document. type: String - contextPath: Ignite.IP.site_actor_alias description: Actor alias of the site associated with the document. type: String - contextPath: Ignite.IP.site_actor_url description: Actor URL of the site associated with the document. type: String - contextPath: Ignite.IP.site_actor_username description: Actor username of the site associated with the document. type: String - contextPath: Ignite.IP.site_source_uri description: Source URI of the site associated with the document. type: String - contextPath: Ignite.IP.site_title description: Title of the site associated with the document. type: String - contextPath: Ignite.IP.sort_date description: Date used for sorting the document. type: Date - contextPath: Ignite.IP.source_uri description: Source URI of the document. type: String - contextPath: Ignite.IP.title description: Title of the document. type: String - contextPath: Ignite.IP.title_id description: ID of the title. type: String - contextPath: Ignite.IP.type description: Type of the indicator. type: String - contextPath: Ignite.IP.value description: The value of IP. type: string - contextPath: Ignite.IP.href description: The href of IP. type: string - contextPath: Ignite.IP.entity_type description: The entity type of IP. type: string - contextPath: Ignite.IP.score.value description: The score value of IP. type: string - contextPath: Ignite.IP.score.last_scored_at description: The last scored time of IP. type: string - contextPath: Ignite.IP.score.raw_score description: The raw score of IP. type: number - contextPath: Ignite.IP.modified_at description: Last time when IP was modified. type: string - contextPath: Ignite.IP.created_at description: The creation time of IP. type: string - contextPath: Ignite.IP.last_seen_at description: The last seen time of IP. type: string - contextPath: Ignite.IP.platform_urls.ignite description: The ignite platform url of IP. type: string - contextPath: Ignite.IP.apt_description description: The apt description of IP. type: string - contextPath: Ignite.IP.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.IP.external_references.url description: The url of external reference. type: string - contextPath: Ignite.IP.hashes.md5 description: The md5 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha1 description: The sha1 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha256 description: The sha256 hash of IP. type: string - contextPath: Ignite.IP.malware_description description: The malware description of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.id description: The mitre attack id of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.IP.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.IP.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.IP.sightings.source description: The source of IP sighting. type: string - contextPath: Ignite.IP.sightings.sighted_at description: The sighted at time of IP. type: string - contextPath: Ignite.IP.sightings.tags description: The tags of IP sighting. type: array - contextPath: Ignite.IP.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.source description: The source of IP latest sighting. type: string - contextPath: Ignite.IP.latest_sighting.sighted_at description: The sighted at time of latest sighting of IP. type: string - contextPath: Ignite.IP.latest_sighting.tags description: The tags of IP latest sighting. type: array - contextPath: Ignite.IP.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.total_sightings description: The total sightings of IP. type: integer description: Looks up the "IP" type indicator details. The reputation of the IP address is decided from the indicator score if it is found in the Ignite IOC database. Alternatively, the IP address is considered suspicious if it matches any one of the community's peer IP addresses. - name: flashpoint-ignite-common-lookup arguments: - name: indicator required: true default: true description: List of indicators. isArray: true outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.File.id description: The ID of file. type: string - contextPath: Ignite.File.type description: Type of the indicator. type: String - contextPath: Ignite.File.value description: The value of file. type: string - contextPath: Ignite.File.href description: The href of file. type: string - contextPath: Ignite.File.entity_type description: The entity type of file. type: string - contextPath: Ignite.File.score.value description: The score value of file. type: string - contextPath: Ignite.File.score.last_scored_at description: The last scored time of file. type: string - contextPath: Ignite.File.score.raw_score description: The raw score of file. type: number - contextPath: Ignite.File.modified_at description: Last time when file was modified. type: string - contextPath: Ignite.File.created_at description: The creation time of file. type: string - contextPath: Ignite.File.last_seen_at description: The last seen time of file. type: string - contextPath: Ignite.File.sort_date description: The sort date of file. type: string - contextPath: Ignite.File.platform_urls.ignite description: The ignite platform url of file. type: string - contextPath: Ignite.File.apt_description description: The apt description of file. type: string - contextPath: Ignite.File.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.File.external_references.url description: The url of external reference. type: string - contextPath: Ignite.File.hashes.md5 description: The md5 hash of file. type: string - contextPath: Ignite.File.hashes.sha1 description: The sha1 hash of file. type: string - contextPath: Ignite.File.hashes.sha256 description: The sha256 hash of file. type: string - contextPath: Ignite.File.malware_description description: The malware description of file. type: string - contextPath: Ignite.File.mitre_attack_ids.id description: The mitre attack id of file. type: string - contextPath: Ignite.File.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.File.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.File.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.File.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.File.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.File.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.File.sightings.source description: The source of file sighting. type: string - contextPath: Ignite.File.sightings.sighted_at description: The sighted at time of file. type: string - contextPath: Ignite.File.sightings.tags description: The tags of file sighting. type: array - contextPath: Ignite.File.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.latest_sighting.source description: The source of file latest sighting. type: string - contextPath: Ignite.File.latest_sighting.sighted_at description: The sighted at time of latest sighting of file. type: string - contextPath: Ignite.File.latest_sighting.tags description: The tags of file latest sighting. type: array - contextPath: Ignite.File.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.total_sightings description: The total sightings of file. type: integer - contextPath: File.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: File.Malicious.Vendor description: Vendor of the malicious file. type: string - contextPath: File.MD5 description: MD5 type file. type: string - contextPath: File.SHA1 description: SHA1 type file. type: string - contextPath: File.SHA512 description: SHA512 type file. type: string - contextPath: File.Relationships.EntityA description: The source of the relationship. type: string - contextPath: File.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: File.Relationships.Relationship description: The name of the relationship. type: string - contextPath: File.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: File.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.Domain.id description: The ID of domain. type: string - contextPath: Ignite.Domain.type description: Type of the indicator. type: String - contextPath: Ignite.Domain.value description: The value of domain. type: string - contextPath: Ignite.Domain.href description: The href of domain. type: string - contextPath: Ignite.Domain.entity_type description: The entity type of domain. type: string - contextPath: Ignite.Domain.score.value description: The score value of domain. type: string - contextPath: Ignite.Domain.score.last_scored_at description: The last scored time of domain. type: string - contextPath: Ignite.Domain.score.raw_score description: The raw score of domain. type: number - contextPath: Ignite.Domain.modified_at description: Last time when domain was modified. type: string - contextPath: Ignite.Domain.created_at description: The creation time of domain. type: string - contextPath: Ignite.Domain.last_seen_at description: The last seen time of domain. type: string - contextPath: Ignite.Domain.sort_date description: The sort date of domain. type: string - contextPath: Ignite.Domain.platform_urls.ignite description: The ignite platform url of domain. type: string - contextPath: Ignite.Domain.apt_description description: The apt description of domain. type: string - contextPath: Ignite.Domain.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.Domain.external_references.url description: The url of external reference. type: string - contextPath: Ignite.Domain.hashes.md5 description: The md5 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha1 description: The sha1 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha256 description: The sha256 hash of domain. type: string - contextPath: Ignite.Domain.malware_description description: The malware description of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.id description: The mitre attack id of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.Domain.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.Domain.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.Domain.sightings.source description: The source of domain sighting. type: string - contextPath: Ignite.Domain.sightings.sighted_at description: The sighted at of domain. type: string - contextPath: Ignite.Domain.sightings.tags description: The tags of domain sighting. type: array - contextPath: Ignite.Domain.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.source description: The source of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.sighted_at description: The sighted at of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.tags description: The tags of domain latest sighting. type: array - contextPath: Ignite.Domain.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.total_sightings description: The total sightings of domain. type: integer - contextPath: Domain.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: Domain.Malicious.Vendor description: Vendor of the malicious indicator. type: string - contextPath: Domain.Name description: Name of the domain. type: string - contextPath: Domain.Description description: The description of the indicator. type: string - contextPath: Domain.Relationships.EntityA description: The source of the relationship. type: string - contextPath: Domain.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: Domain.Relationships.Relationship description: The name of the relationship. type: string - contextPath: Domain.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: Domain.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: URL.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: URL.Malicious.Vendor description: Vendor of the malicious URL. type: string - contextPath: URL.Data description: The URL. type: string - contextPath: URL.Relationships.EntityA description: The source of the relationship. type: string - contextPath: URL.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: URL.Relationships.Relationship description: The name of the relationship. type: string - contextPath: URL.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: URL.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: URL.Description description: The description of the indicator. type: string - contextPath: Ignite.URL.id description: The ID of URL. type: string - contextPath: Ignite.URL.type description: Type of the indicator. type: String - contextPath: Ignite.URL.value description: The value of URL. type: string - contextPath: Ignite.URL.href description: The href of URL. type: string - contextPath: Ignite.URL.entity_type description: The entity type of URL. type: string - contextPath: Ignite.URL.score.value description: The score value of URL. type: string - contextPath: Ignite.URL.score.last_scored_at description: The last scored time of URL. type: string - contextPath: Ignite.URL.score.raw_score description: The raw score of URL. type: number - contextPath: Ignite.URL.modified_at description: Last time when URL was modified. type: string - contextPath: Ignite.URL.created_at description: The creation time of URL. type: string - contextPath: Ignite.URL.last_seen_at description: The last seen time of URL. type: string - contextPath: Ignite.URL.sort_date description: The sort date of URL. type: string - contextPath: Ignite.URL.platform_urls.ignite description: The ignite platform url of URL. type: string - contextPath: Ignite.URL.apt_description description: The apt description of URL. type: string - contextPath: Ignite.URL.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.URL.external_references.url description: The url of external reference. type: string - contextPath: Ignite.URL.hashes.md5 description: The md5 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha1 description: The sha1 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha256 description: The sha256 hash of URL. type: string - contextPath: Ignite.URL.malware_description description: The malware description of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.id description: The mitre attack id of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.URL.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.URL.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.URL.sightings.source description: The source of URL sighting. type: string - contextPath: Ignite.URL.sightings.sighted_at description: The sighted at time of URL. type: string - contextPath: Ignite.URL.sightings.tags description: The tags of URL sighting. type: array - contextPath: Ignite.URL.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.source description: The source of URL latest sighting. type: string - contextPath: Ignite.URL.latest_sighting.sighted_at description: The sighted at time of latest sighting of URL. type: string - contextPath: Ignite.URL.latest_sighting.tags description: The tags of URL latest sighting. type: array - contextPath: Ignite.URL.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.total_sightings description: The total sightings of URL. type: integer - contextPath: IP.Address description: The IP address. type: string - contextPath: IP.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: IP.Malicious.Vendor description: The vendor used to calculate the severity of the IP address. type: string - contextPath: IP.Description description: The description of the indicator. type: string - contextPath: IP.Relationships.EntityA description: The source of the relationship. type: string - contextPath: IP.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: IP.Relationships.Relationship description: The name of the relationship. type: string - contextPath: IP.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: IP.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.IP.id description: Unique identifier for the document. type: String - contextPath: Ignite.IP.type description: Type of the indicator. type: String - contextPath: Ignite.IP.value description: The value of IP. type: string - contextPath: Ignite.IP.href description: The href of IP. type: string - contextPath: Ignite.IP.entity_type description: The entity type of IP. type: string - contextPath: Ignite.IP.score.value description: The score value of IP. type: string - contextPath: Ignite.IP.score.last_scored_at description: The last scored time of IP. type: string - contextPath: Ignite.IP.score.raw_score description: The raw score of IP. type: number - contextPath: Ignite.IP.modified_at description: Last time when IP was modified. type: string - contextPath: Ignite.IP.created_at description: The creation time of IP. type: string - contextPath: Ignite.IP.last_seen_at description: The last seen time of IP. type: string - contextPath: Ignite.IP.platform_urls.ignite description: The ignite platform url of IP. type: string - contextPath: Ignite.IP.apt_description description: The apt description of IP. type: string - contextPath: Ignite.IP.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.IP.external_references.url description: The url of external reference. type: string - contextPath: Ignite.IP.hashes.md5 description: The md5 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha1 description: The sha1 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha256 description: The sha256 hash of IP. type: string - contextPath: Ignite.IP.malware_description description: The malware description of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.id description: The mitre attack id of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.IP.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.IP.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.IP.sightings.source description: The source of IP sighting. type: string - contextPath: Ignite.IP.sightings.sighted_at description: The sighted at time of IP. type: string - contextPath: Ignite.IP.sightings.tags description: The tags of IP sighting. type: array - contextPath: Ignite.IP.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.source description: The source of IP latest sighting. type: string - contextPath: Ignite.IP.latest_sighting.sighted_at description: The sighted at time of latest sighting of IP. type: string - contextPath: Ignite.IP.latest_sighting.tags description: The tags of IP latest sighting. type: array - contextPath: Ignite.IP.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.total_sightings description: The total sightings of IP. type: integer description: 'Looks up details for indicators of types: "URL", "Domain", "File Hash", and "IP". The reputation of the indicator is decided from the indicator score if it is found in the Ignite IOC database.' - name: flashpoint-ignite-indicator-get arguments: - name: indicator_id required: true default: true description: ID of the indicator. isArray: true outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.File.id description: The ID of file. type: string - contextPath: Ignite.File.type description: Type of the indicator. type: String - contextPath: Ignite.File.value description: The value of file. type: string - contextPath: Ignite.File.href description: The href of file. type: string - contextPath: Ignite.File.entity_type description: The entity type of file. type: string - contextPath: Ignite.File.score.value description: The score value of file. type: string - contextPath: Ignite.File.score.last_scored_at description: The last scored time of file. type: string - contextPath: Ignite.File.score.raw_score description: The raw score of file. type: number - contextPath: Ignite.File.modified_at description: Last time when file was modified. type: string - contextPath: Ignite.File.created_at description: The creation time of file. type: string - contextPath: Ignite.File.last_seen_at description: The last seen time of file. type: string - contextPath: Ignite.File.sort_date description: The sort date of file. type: string - contextPath: Ignite.File.platform_urls.ignite description: The ignite platform url of file. type: string - contextPath: Ignite.File.apt_description description: The apt description of file. type: string - contextPath: Ignite.File.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.File.external_references.url description: The url of external reference. type: string - contextPath: Ignite.File.hashes.md5 description: The md5 hash of file. type: string - contextPath: Ignite.File.hashes.sha1 description: The sha1 hash of file. type: string - contextPath: Ignite.File.hashes.sha256 description: The sha256 hash of file. type: string - contextPath: Ignite.File.malware_description description: The malware description of file. type: string - contextPath: Ignite.File.mitre_attack_ids.id description: The mitre attack id of file. type: string - contextPath: Ignite.File.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.File.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.File.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.File.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.File.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.File.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.File.sightings.source description: The source of file sighting. type: string - contextPath: Ignite.File.sightings.sighted_at description: The sighted at time of file. type: string - contextPath: Ignite.File.sightings.tags description: The tags of file sighting. type: array - contextPath: Ignite.File.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.latest_sighting.source description: The source of file latest sighting. type: string - contextPath: Ignite.File.latest_sighting.sighted_at description: The sighted at time of latest sighting of file. type: string - contextPath: Ignite.File.latest_sighting.tags description: The tags of file latest sighting. type: array - contextPath: Ignite.File.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.total_sightings description: The total sightings of file. type: integer - contextPath: File.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: File.Malicious.Vendor description: Vendor of the malicious file. type: string - contextPath: File.MD5 description: MD5 type file. type: string - contextPath: File.SHA1 description: SHA1 type file. type: string - contextPath: File.SHA512 description: SHA512 type file. type: string - contextPath: File.Relationships.EntityA description: The source of the relationship. type: string - contextPath: File.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: File.Relationships.Relationship description: The name of the relationship. type: string - contextPath: File.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: File.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.File.historical_tags description: The tags of File. type: string - contextPath: Ignite.File.reports.html description: Platform url to access the report of the indicator. type: string - contextPath: Ignite.File.reports.json description: API url of the report of the indicator. type: string - contextPath: Ignite.Domain.id description: The ID of domain. type: string - contextPath: Ignite.Domain.type description: Type of the indicator. type: String - contextPath: Ignite.Domain.value description: The value of domain. type: string - contextPath: Ignite.Domain.href description: The href of domain. type: string - contextPath: Ignite.Domain.entity_type description: The entity type of domain. type: string - contextPath: Ignite.Domain.score.value description: The score value of domain. type: string - contextPath: Ignite.Domain.score.last_scored_at description: The last scored time of domain. type: string - contextPath: Ignite.Domain.score.raw_score description: The raw score of domain. type: number - contextPath: Ignite.Domain.modified_at description: Last time when domain was modified. type: string - contextPath: Ignite.Domain.created_at description: The creation time of domain. type: string - contextPath: Ignite.Domain.last_seen_at description: The last seen time of domain. type: string - contextPath: Ignite.Domain.sort_date description: The sort date of domain. type: string - contextPath: Ignite.Domain.platform_urls.ignite description: The ignite platform url of domain. type: string - contextPath: Ignite.Domain.apt_description description: The apt description of domain. type: string - contextPath: Ignite.Domain.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.Domain.external_references.url description: The url of external reference. type: string - contextPath: Ignite.Domain.hashes.md5 description: The md5 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha1 description: The sha1 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha256 description: The sha256 hash of domain. type: string - contextPath: Ignite.Domain.malware_description description: The malware description of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.id description: The mitre attack id of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.Domain.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.Domain.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.Domain.sightings.source description: The source of domain sighting. type: string - contextPath: Ignite.Domain.sightings.sighted_at description: The sighted at of domain. type: string - contextPath: Ignite.Domain.sightings.tags description: The tags of domain sighting. type: array - contextPath: Ignite.Domain.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.source description: The source of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.sighted_at description: The sighted at of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.tags description: The tags of domain latest sighting. type: array - contextPath: Ignite.Domain.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.total_sightings description: The total sightings of domain. type: integer - contextPath: Domain.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: Domain.Malicious.Vendor description: Vendor of the malicious indicator. type: string - contextPath: Domain.Name description: Name of the domain. type: string - contextPath: Domain.Description description: The description of the indicator. type: string - contextPath: Domain.Relationships.EntityA description: The source of the relationship. type: string - contextPath: Domain.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: Domain.Relationships.Relationship description: The name of the relationship. type: string - contextPath: Domain.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: Domain.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.Domain.historical_tags description: The tags of Domain. type: string - contextPath: Ignite.Domain.reports.html description: Platform url to access the report of the indicator. type: string - contextPath: Ignite.Domain.reports.json description: API url of the report of the indicator. type: string - contextPath: URL.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: URL.Malicious.Vendor description: Vendor of the malicious URL. type: string - contextPath: URL.Data description: The URL. type: string - contextPath: URL.Relationships.EntityA description: The source of the relationship. type: string - contextPath: URL.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: URL.Relationships.Relationship description: The name of the relationship. type: string - contextPath: URL.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: URL.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: URL.Description description: The description of the indicator. type: string - contextPath: Ignite.URL.id description: The ID of URL. type: string - contextPath: Ignite.URL.type description: Type of the indicator. type: String - contextPath: Ignite.URL.value description: The value of URL. type: string - contextPath: Ignite.URL.href description: The href of URL. type: string - contextPath: Ignite.URL.entity_type description: The entity type of URL. type: string - contextPath: Ignite.URL.score.value description: The score value of URL. type: string - contextPath: Ignite.URL.score.last_scored_at description: The last scored time of URL. type: string - contextPath: Ignite.URL.score.raw_score description: The raw score of URL. type: number - contextPath: Ignite.URL.modified_at description: Last time when URL was modified. type: string - contextPath: Ignite.URL.created_at description: The creation time of URL. type: string - contextPath: Ignite.URL.last_seen_at description: The last seen time of URL. type: string - contextPath: Ignite.URL.sort_date description: The sort date of URL. type: string - contextPath: Ignite.URL.platform_urls.ignite description: The ignite platform url of URL. type: string - contextPath: Ignite.URL.apt_description description: The apt description of URL. type: string - contextPath: Ignite.URL.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.URL.external_references.url description: The url of external reference. type: string - contextPath: Ignite.URL.hashes.md5 description: The md5 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha1 description: The sha1 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha256 description: The sha256 hash of URL. type: string - contextPath: Ignite.URL.malware_description description: The malware description of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.id description: The mitre attack id of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.URL.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.URL.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.URL.sightings.source description: The source of URL sighting. type: string - contextPath: Ignite.URL.sightings.sighted_at description: The sighted at time of URL. type: string - contextPath: Ignite.URL.sightings.tags description: The tags of URL sighting. type: array - contextPath: Ignite.URL.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.source description: The source of URL latest sighting. type: string - contextPath: Ignite.URL.latest_sighting.sighted_at description: The sighted at time of latest sighting of URL. type: string - contextPath: Ignite.URL.latest_sighting.tags description: The tags of URL latest sighting. type: array - contextPath: Ignite.URL.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.total_sightings description: The total sightings of URL. type: integer - contextPath: Ignite.URL.historical_tags description: The tags of URL. type: string - contextPath: Ignite.URL.reports.html description: Platform url to access the report of the indicator. type: string - contextPath: Ignite.URL.reports.json description: API url of the report of the indicator. type: string - contextPath: IP.Address description: The IP address. type: string - contextPath: IP.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: IP.Malicious.Vendor description: The vendor used to calculate the severity of the IP address. type: string - contextPath: IP.Description description: The description of the indicator. type: string - contextPath: IP.Relationships.EntityA description: The source of the relationship. type: string - contextPath: IP.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: IP.Relationships.Relationship description: The name of the relationship. type: string - contextPath: IP.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: IP.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: Ignite.IP.id description: Unique identifier for the document. type: String - contextPath: Ignite.IP.type description: Type of the indicator. type: String - contextPath: Ignite.IP.value description: The value of IP. type: string - contextPath: Ignite.IP.href description: The href of IP. type: string - contextPath: Ignite.IP.entity_type description: The entity type of IP. type: string - contextPath: Ignite.IP.score.value description: The score value of IP. type: string - contextPath: Ignite.IP.score.last_scored_at description: The last scored time of IP. type: string - contextPath: Ignite.IP.score.raw_score description: The raw score of IP. type: number - contextPath: Ignite.IP.modified_at description: Last time when IP was modified. type: string - contextPath: Ignite.IP.created_at description: The creation time of IP. type: string - contextPath: Ignite.IP.last_seen_at description: The last seen time of IP. type: string - contextPath: Ignite.IP.platform_urls.ignite description: The ignite platform url of IP. type: string - contextPath: Ignite.IP.apt_description description: The apt description of IP. type: string - contextPath: Ignite.IP.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.IP.external_references.url description: The url of external reference. type: string - contextPath: Ignite.IP.hashes.md5 description: The md5 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha1 description: The sha1 hash of IP. type: string - contextPath: Ignite.IP.hashes.sha256 description: The sha256 hash of IP. type: string - contextPath: Ignite.IP.malware_description description: The malware description of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.id description: The mitre attack id of IP. type: string - contextPath: Ignite.IP.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.IP.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.IP.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.IP.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.IP.sightings.source description: The source of IP sighting. type: string - contextPath: Ignite.IP.sightings.sighted_at description: The sighted at time of IP. type: string - contextPath: Ignite.IP.sightings.tags description: The tags of IP sighting. type: array - contextPath: Ignite.IP.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.source description: The source of IP latest sighting. type: string - contextPath: Ignite.IP.latest_sighting.sighted_at description: The sighted at time of latest sighting of IP. type: string - contextPath: Ignite.IP.latest_sighting.tags description: The tags of IP latest sighting. type: array - contextPath: Ignite.IP.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.IP.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.IP.total_sightings description: The total sightings of IP. type: integer - contextPath: Ignite.IP.historical_tags description: The tags of IP. type: string - contextPath: Ignite.IP.reports.html description: Platform url to access the report of the indicator. type: string - contextPath: Ignite.IP.reports.json description: API url of the report of the indicator. type: string description: 'Looks up details for indicators of types "URL", "Domain", "File Hash", and "IP" using their ID. The reputation of the indicator is decided from the indicator score if it is found in the Ignite IOC database.' - name: url arguments: - name: url required: true default: true description: A comma-separated list of URLs. isArray: true - name: exact_match required: false description: Whether to perform an exact match on the URL value. auto: PREDEFINED predefined: - "True" - "False" outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Url.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.Url.Event.Url description: URL of the indicator. type: string - contextPath: Ignite.Url.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.Url.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.Url.Event.Fpid description: The Flashpoint ID of the indicator. type: string - contextPath: Ignite.Url.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.Url.Event.Type description: The indicator type. type: string - contextPath: Ignite.Url.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.Url.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: URL.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: URL.Malicious.Vendor description: Vendor of the malicious URL. type: string - contextPath: URL.Data description: The URL. type: string - contextPath: URL.Relationships.EntityA description: The source of the relationship. type: string - contextPath: URL.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: URL.Relationships.Relationship description: The name of the relationship. type: string - contextPath: URL.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: URL.Relationships.EntityBType description: The type of the destination of the relationship. type: string - contextPath: URL.Description description: The description of the indicator. type: string - contextPath: Ignite.URL.id description: The ID of URL. type: string - contextPath: Ignite.URL.type description: Type of the indicator. type: string - contextPath: Ignite.URL.value description: The value of URL. type: string - contextPath: Ignite.URL.href description: The href of URL. type: string - contextPath: Ignite.URL.entity_type description: The entity type of URL. type: string - contextPath: Ignite.URL.score.value description: The score value of URL. type: string - contextPath: Ignite.URL.score.last_scored_at description: The last scored time of URL. type: string - contextPath: Ignite.URL.score.raw_score description: The raw score of URL. type: number - contextPath: Ignite.URL.modified_at description: Last time when URL was modified. type: string - contextPath: Ignite.URL.created_at description: The creation time of URL. type: string - contextPath: Ignite.URL.last_seen_at description: The last seen time of URL. type: string - contextPath: Ignite.URL.sort_date description: The sort date of URL. type: string - contextPath: Ignite.URL.platform_urls.ignite description: The ignite platform url of URL. type: string - contextPath: Ignite.URL.apt_description description: The apt description of URL. type: string - contextPath: Ignite.URL.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.URL.external_references.url description: The url of external reference. type: string - contextPath: Ignite.URL.hashes.md5 description: The md5 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha1 description: The sha1 hash of URL. type: string - contextPath: Ignite.URL.hashes.sha256 description: The sha256 hash of URL. type: string - contextPath: Ignite.URL.malware_description description: The malware description of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.id description: The mitre attack id of URL. type: string - contextPath: Ignite.URL.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.URL.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.URL.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.URL.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.URL.sightings.source description: The source of URL sighting. type: string - contextPath: Ignite.URL.sightings.sighted_at description: The sighted at time of URL. type: string - contextPath: Ignite.URL.sightings.tags description: The tags of URL sighting. type: array - contextPath: Ignite.URL.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.source description: The source of URL latest sighting. type: string - contextPath: Ignite.URL.latest_sighting.sighted_at description: The sighted at time of latest sighting of URL. type: string - contextPath: Ignite.URL.latest_sighting.tags description: The tags of URL latest sighting. type: array - contextPath: Ignite.URL.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.URL.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.URL.total_sightings description: The total sightings of URL. type: integer description: Looks up the "URL" type indicator details. The reputation of the URL is decided from the indicator score if it is found in the Ignite IOC database. - name: domain arguments: - name: domain required: true default: true description: A comma-separated list of domains. isArray: true - name: exact_match required: false description: Whether to perform an exact match on the domain value. auto: PREDEFINED predefined: - "True" - "False" outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Domain.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.Domain.Event.Domain description: The domain of the indicator. type: string - contextPath: Ignite.Domain.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.Domain.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.Domain.Event.Fpid description: The Ignite ID of the indicator. type: string - contextPath: Ignite.Domain.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.Domain.Event.Type description: The indicator type. type: string - contextPath: Ignite.Domain.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.Domain.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: Ignite.Domain.id description: The ID of domain. type: string - contextPath: Ignite.Domain.type description: Type of the indicator. type: string - contextPath: Ignite.Domain.value description: The value of domain. type: string - contextPath: Ignite.Domain.href description: The href of domain. type: string - contextPath: Ignite.Domain.entity_type description: The entity type of domain. type: string - contextPath: Ignite.Domain.score.value description: The score value of domain. type: string - contextPath: Ignite.Domain.score.last_scored_at description: The last scored time of domain. type: string - contextPath: Ignite.Domain.score.raw_score description: The raw score of domain. type: number - contextPath: Ignite.Domain.modified_at description: Last time when domain was modified. type: string - contextPath: Ignite.Domain.created_at description: The creation time of domain. type: string - contextPath: Ignite.Domain.last_seen_at description: The last seen time of domain. type: string - contextPath: Ignite.Domain.sort_date description: The sort date of domain. type: string - contextPath: Ignite.Domain.platform_urls.ignite description: The ignite platform url of domain. type: string - contextPath: Ignite.Domain.apt_description description: The apt description of domain. type: string - contextPath: Ignite.Domain.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.Domain.external_references.url description: The url of external reference. type: string - contextPath: Ignite.Domain.hashes.md5 description: The md5 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha1 description: The sha1 hash of domain. type: string - contextPath: Ignite.Domain.hashes.sha256 description: The sha256 hash of domain. type: string - contextPath: Ignite.Domain.malware_description description: The malware description of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.id description: The mitre attack id of domain. type: string - contextPath: Ignite.Domain.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.Domain.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.Domain.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.Domain.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.Domain.sightings.source description: The source of domain sighting. type: string - contextPath: Ignite.Domain.sightings.sighted_at description: The sighted at of domain. type: string - contextPath: Ignite.Domain.sightings.tags description: The tags of domain sighting. type: array - contextPath: Ignite.Domain.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.source description: The source of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.sighted_at description: The sighted at of domain latest sighting. type: string - contextPath: Ignite.Domain.latest_sighting.tags description: The tags of domain latest sighting. type: array - contextPath: Ignite.Domain.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.Domain.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.Domain.total_sightings description: The total sightings of domain. type: integer - contextPath: Domain.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: Domain.Malicious.Vendor description: Vendor of the malicious indicator. type: string - contextPath: Domain.Name description: Name of the domain. type: string - contextPath: Domain.Description description: The description of the indicator. type: string - contextPath: Domain.Relationships.EntityA description: The source of the relationship. type: string - contextPath: Domain.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: Domain.Relationships.Relationship description: The name of the relationship. type: string - contextPath: Domain.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: Domain.Relationships.EntityBType description: The type of the destination of the relationship. type: string description: Looks up the "Domain" type indicator details. The reputation of the domain is decided from the indicator score if it is found in the Ignite IOC database. - name: file arguments: - name: file required: true default: true description: List of files. isArray: true - name: exact_match required: false description: Whether to perform an exact match on the file hash value. auto: PREDEFINED predefined: - "True" - "False" outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.File.Event.Href description: A list of reference links of the indicator. type: string - contextPath: Ignite.File.Event.MD5 description: MD5 file hash of the indicator. type: string - contextPath: Ignite.File.Event.SHA1 description: SHA1 file hash of the indicator. type: string - contextPath: Ignite.File.Event.SHA256 description: SHA256 file hash of the indicator. type: string - contextPath: Ignite.File.Event.SHA512 description: SHA512 file hash of the indicator. type: string - contextPath: Ignite.File.Event.SSDeep description: SSDeep file hash of the indicator. type: string - contextPath: Ignite.File.Event.EventDetails description: The event details in which the indicator was observed. type: string - contextPath: Ignite.File.Event.Category description: The category of the indicator. type: string - contextPath: Ignite.File.Event.Fpid description: The Ignite ID of the indicator. type: string - contextPath: Ignite.File.Event.Timestamp description: The time and date that the indicator was observed. type: string - contextPath: Ignite.File.Event.Type description: The indicator type. type: string - contextPath: Ignite.File.Event.Uuid description: The UUID of the indicator. type: string - contextPath: Ignite.File.Event.Comment description: The comment that was provided when the indicator was observed. type: string - contextPath: Ignite.File.id description: The ID of file. type: string - contextPath: Ignite.File.type description: Type of the indicator. type: string - contextPath: Ignite.File.value description: The value of file. type: string - contextPath: Ignite.File.href description: The href of file. type: string - contextPath: Ignite.File.entity_type description: The entity type of file. type: string - contextPath: Ignite.File.score.value description: The score value of file. type: string - contextPath: Ignite.File.score.last_scored_at description: The last scored time of file. type: string - contextPath: Ignite.File.score.raw_score description: The raw score of file. type: number - contextPath: Ignite.File.modified_at description: Last time when file was modified. type: string - contextPath: Ignite.File.created_at description: The creation time of file. type: string - contextPath: Ignite.File.last_seen_at description: The last seen time of file. type: string - contextPath: Ignite.File.sort_date description: The sort date of file. type: string - contextPath: Ignite.File.platform_urls.ignite description: The ignite platform url of file. type: string - contextPath: Ignite.File.apt_description description: The apt description of file. type: string - contextPath: Ignite.File.external_references.source_name description: The source name of external reference. type: string - contextPath: Ignite.File.external_references.url description: The url of external reference. type: string - contextPath: Ignite.File.hashes.md5 description: The md5 hash of file. type: string - contextPath: Ignite.File.hashes.sha1 description: The sha1 hash of file. type: string - contextPath: Ignite.File.hashes.sha256 description: The sha256 hash of file. type: string - contextPath: Ignite.File.malware_description description: The malware description of file. type: string - contextPath: Ignite.File.mitre_attack_ids.id description: The mitre attack id of file. type: string - contextPath: Ignite.File.mitre_attack_ids.name description: The name of mitre attack id. type: string - contextPath: Ignite.File.mitre_attack_ids.tactics description: A list of tactics associated with mitre attack id. type: unknown - contextPath: Ignite.File.relationships.iocs.id description: The id of ioc. type: string - contextPath: Ignite.File.relationships.iocs.type description: The type of ioc. type: string - contextPath: Ignite.File.relationships.iocs.value description: The value of ioc. type: string - contextPath: Ignite.File.relationships.iocs.href description: The href of ioc. type: string - contextPath: Ignite.File.sightings.source description: The source of file sighting. type: string - contextPath: Ignite.File.sightings.sighted_at description: The sighted at time of file. type: string - contextPath: Ignite.File.sightings.tags description: The tags of file sighting. type: array - contextPath: Ignite.File.sightings.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.sightings.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.latest_sighting.source description: The source of file latest sighting. type: string - contextPath: Ignite.File.latest_sighting.sighted_at description: The sighted at time of latest sighting of file. type: string - contextPath: Ignite.File.latest_sighting.tags description: The tags of file latest sighting. type: array - contextPath: Ignite.File.latest_sighting.related_iocs.id description: The ID of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.type description: The type of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.value description: The value of related IOC. type: string - contextPath: Ignite.File.latest_sighting.related_iocs.href description: The href of related IOC. type: string - contextPath: Ignite.File.total_sightings description: The total sightings of file. type: integer - contextPath: File.Malicious.Description description: The description of the malicious indicator. type: string - contextPath: File.Malicious.Vendor description: Vendor of the malicious file. type: string - contextPath: File.MD5 description: MD5 type file. type: string - contextPath: File.SHA1 description: SHA1 type file. type: string - contextPath: File.SHA256 description: SHA256 type file. type: string - contextPath: File.SHA512 description: SHA512 type file. type: string - contextPath: File.SSDeep description: SSDeep type file. type: string - contextPath: File.Relationships.EntityA description: The source of the relationship. type: string - contextPath: File.Relationships.EntityB description: The destination of the relationship. type: string - contextPath: File.Relationships.Relationship description: The name of the relationship. type: string - contextPath: File.Relationships.EntityAType description: The type of the source of the relationship. type: string - contextPath: File.Relationships.EntityBType description: The type of the destination of the relationship. type: string description: Looks up the "File" type indicator details. The reputation of the file is decided from the indicator score if it is found in the Ignite IOC database. - name: flashpoint-ignite-vulnerability-get arguments: - name: id default: true required: true description: The Flashpoint ID of the vulnerability to retrieve. outputs: - contextPath: CVE.ID description: 'The ID of the CVE, for example: CVE-2015-1653.' type: String - contextPath: CVE.CVSS description: 'The CVSS of the CVE, for example: 10.0.' type: String - contextPath: CVE.Version description: 'The version of the CVE, for example: 3.0.' type: String - contextPath: CVE.Vector description: 'The vector of the CVE, for example: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N.' type: String - contextPath: CVE.Table description: 'The table of the CVE.' type: String - contextPath: CVE.Published description: The timestamp of when the CVE was published. type: Date - contextPath: CVE.Modified description: The timestamp of when the CVE was last modified. type: Date - contextPath: CVE.Description description: A description of the CVE. type: String - contextPath: CVE.Tags description: The tags of the CVE. type: String - contextPath: CVE.VulnerableProducts description: The vulnerable products of the CVE. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Vulnerability.id description: The unique identifier of the vulnerability. type: Number - contextPath: Ignite.Vulnerability.cve_ids description: A list of CVE IDs associated with the vulnerability. type: Unknown - contextPath: Ignite.Vulnerability.title description: The title of the vulnerability. type: String - contextPath: Ignite.Vulnerability.keywords description: A list of keywords associated with the vulnerability. type: String - contextPath: Ignite.Vulnerability.description description: The description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.solution description: The solution or remediation steps for the vulnerability. type: String - contextPath: Ignite.Vulnerability.technical_description description: The technical description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.published_at description: The date when the vulnerability was published. type: Date - contextPath: Ignite.Vulnerability.timelines.last_modified_at description: The date when the vulnerability was last modified. type: Date - contextPath: Ignite.Vulnerability.timelines.exploit_published_at description: The date when the exploit was published. type: Date - contextPath: Ignite.Vulnerability.timelines.discovered_at description: The date when the vulnerability was discovered. type: Date - contextPath: Ignite.Vulnerability.timelines.disclosed_at description: The date when the vulnerability was disclosed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_informed_at description: The date when the vendor was informed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_acknowledged_at description: The date when the vendor acknowledged the vulnerability. type: Date - contextPath: Ignite.Vulnerability.timelines.third_party_solution_provided_at description: The date when a third-party solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.solution_provided_at description: The date when a solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.exploited_in_the_wild_at description: The date when the vulnerability was exploited in the wild. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_response_time description: The time taken for vendor response. type: String - contextPath: Ignite.Vulnerability.timelines.time_to_patch description: The time taken to patch the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.total_time_to_patch description: The total time taken to patch the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.time_unpatched description: The time the vulnerability remained unpatched. type: String - contextPath: Ignite.Vulnerability.timelines.time_to_exploit description: The time taken to exploit the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.total_time_to_exploit description: The total time taken to exploit the vulnerability. type: String - contextPath: Ignite.Vulnerability.scores.epss_score description: An EPSS (Exploit Prediction Scoring System) score. type: Number - contextPath: Ignite.Vulnerability.scores.epss_v1_score description: An EPSS version 1 score. type: Number - contextPath: Ignite.Vulnerability.scores.ransomware_score description: A ransomware score. type: Number - contextPath: Ignite.Vulnerability.scores.severity description: The severity level of the vulnerability. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.cve_id description: The CVE ID associated with the social risk score. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.numeric_score description: A numeric social risk score. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.categorical_score description: A categorical social risk score. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.score_date description: The date when the social risk score was calculated. type: Date - contextPath: Ignite.Vulnerability.scores.social_risk_scores.todays_tweets description: The number of tweets today about the vulnerability. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.total_tweets description: The total number of tweets about the vulnerability. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.unique_users description: The number of unique users discussing the vulnerability. type: Number - contextPath: Ignite.Vulnerability.vuln_status description: The status of the vulnerability. type: String - contextPath: Ignite.Vulnerability.alternate_vulndb_id description: An alternate VulnDB ID. type: String - contextPath: Ignite.Vulnerability.changelog.created_at description: The date when the changelog entry was created. type: Date - contextPath: Ignite.Vulnerability.changelog.description description: The description of the changelog entry. type: String - contextPath: Ignite.Vulnerability.cwes.cwe_id description: The CWE identifier. type: String - contextPath: Ignite.Vulnerability.cwes.name description: The name of the CWE. type: String - contextPath: Ignite.Vulnerability.exploits.value description: An exploit URL or identifier. type: String - contextPath: Ignite.Vulnerability.exploits.type description: The type of exploit (e.g., Exploit Database). type: String - contextPath: Ignite.Vulnerability.exploits_count description: The count of exploits associated with the vulnerability. type: Number - contextPath: Ignite.Vulnerability.ext_references.value description: A value of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.type description: The type of external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.created_at description: The date when the external reference was created. type: Date - contextPath: Ignite.Vulnerability.ext_references.description description: The description of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.url description: The URL of the external reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cve_id description: The CVE ID from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.summary description: The summary from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cwes.cwe_id description: The CWE identifier from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cwes.name description: The name of the CWE from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.references.name description: The name of the NVD reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.references.url description: The URL of the NVD reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.access_vector description: The CVSS v2 access vector from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.access_complexity description: The CVSS v2 access complexity from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.authentication description: The CVSS v2 authentication from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.confidentiality_impact description: The CVSS v2 confidentiality impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.integrity_impact description: The CVSS v2 integrity impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.availability_impact description: The CVSS v2 availability impact from NVD. type: Number - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.attack_vector description: The CVSS v3 attack vector from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.attack_complexity description: The CVSS v3 attack complexity from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.privileges_required description: The CVSS v3 privileges required from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.user_interaction description: The CVSS v3 user interaction from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.scope description: The CVSS v3 scope from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.confidentiality_impact description: The CVSS v3 confidentiality impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.integrity_impact description: The CVSS v3 integrity impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.availability_impact description: The CVSS v3 availability impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.score description: The CVSS v3 score from NVD. type: Number - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.vector_string description: The CVSS v3 vector string from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.version description: The CVSS v3 version from NVD. type: String - contextPath: Ignite.Vulnerability.classifications.name description: The name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.longname description: The long name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.description description: The description of the classification. type: String - contextPath: Ignite.Vulnerability.creditees.name description: The name of the individual or organization credited. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.access_vector description: The CVSS v2 access vector. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.access_complexity description: The CVSS v2 access complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.authentication description: The CVSS v2 authentication. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.confidentiality_impact description: The CVSS v2 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.integrity_impact description: The CVSS v2 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.availability_impact description: The CVSS v2 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.source description: The source of the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.generated_at description: The date when the CVSS v2 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v2s.cve_id description: The CVE ID associated with the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.score description: The CVSS v2 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v2s.calculated_cvss_base_score description: A calculated CVSS v2 base score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.attack_vector description: The CVSS v3 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.attack_complexity description: The CVSS v3 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.privileges_required description: The CVSS v3 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.user_interaction description: The CVSS v3 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.scope description: The CVSS v3 scope. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.confidentiality_impact description: The CVSS v3 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.integrity_impact description: The CVSS v3 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.availability_impact description: The CVSS v3 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.source description: The source of the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.generated_at description: The date when the CVSS v3 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v3s.cve_id description: The CVE ID associated with the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.score description: The CVSS v3 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.vector_string description: The CVSS v3 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.version description: The CVSS v3 version. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.remediation_level description: The CVSS v3 remediation level. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.report_confidence description: The CVSS v3 report confidence. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.exploit_code_maturity description: The CVSS v3 exploit code maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.temporal_score description: The CVSS v3 temporal score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.updated_at description: The date when the CVSS v3 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.score description: The CVSS v4 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.threat_score description: The CVSS v4 threat score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.source description: The source of the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.generated_at description: The date when the CVSS v4 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.updated_at description: The date when the CVSS v4 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.cve_id description: The CVE ID associated with the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vector_string description: The CVSS v4 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.version description: The CVSS v4 version. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_vector description: The CVSS v4 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_complexity description: The CVSS v4 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_requirements description: The CVSS v4 attack requirements. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.privileges_required description: The CVSS v4 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.user_interaction description: The CVSS v4 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.exploit_maturity description: The CVSS v4 exploit maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_confidentiality_impact description: The CVSS v4 vulnerable system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_integrity_impact description: The CVSS v4 vulnerable system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_availability_impact description: The CVSS v4 vulnerable system availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_confidentiality_impact description: The CVSS v4 subsequent system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_integrity_impact description: The CVSS v4 subsequent system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_availability_impact description: The CVSS v4 subsequent system availability impact. type: String - contextPath: Ignite.Vulnerability.tags description: The tags associated with the vulnerability. type: String - contextPath: Ignite.Vulnerability.products.id description: The ID of the affected product. type: Number - contextPath: Ignite.Vulnerability.products.name description: The name of the affected product. type: String - contextPath: Ignite.Vulnerability.products.vendor_id description: The vendor ID of the affected product. type: Number - contextPath: Ignite.Vulnerability.products.vendor description: The vendor name of the affected product. type: String - contextPath: Ignite.Vulnerability.products.versions.id description: The ID of the product version. type: Number - contextPath: Ignite.Vulnerability.products.versions.vulndb_version_id description: The VulnDB version ID. type: Number - contextPath: Ignite.Vulnerability.products.versions.name description: The name of the product version. type: String - contextPath: Ignite.Vulnerability.products.versions.affected description: A string indicating whether the product version is affected. type: String - contextPath: Ignite.Vulnerability.products.versions.all_prior_versions_affected description: A boolean indicating whether all prior versions are affected. type: Boolean - contextPath: Ignite.Vulnerability.products.versions.cpes.name description: The CPE (Common Platform Enumeration) name. type: String - contextPath: Ignite.Vulnerability.products.versions.cpes.source description: The source of the CPE. type: String description: Retrieves detailed information about a specific vulnerability by its Flashpoint ID. - name: cve arguments: - name: cve default: true required: true description: List of CVEs. isArray: true outputs: - contextPath: CVE.ID description: 'The ID of the CVE, for example: CVE-2015-1653.' type: String - contextPath: CVE.CVSS description: 'The CVSS of the CVE, for example: 10.0.' type: String - contextPath: CVE.Version description: 'The version of the CVE, for example: 3.0.' type: String - contextPath: CVE.Vector description: 'The vector of the CVE, for example: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N.' type: String - contextPath: CVE.Table description: 'The table of the CVE.' type: String - contextPath: CVE.Published description: The timestamp of when the CVE was published. type: Date - contextPath: CVE.Modified description: The timestamp of when the CVE was last modified. type: Date - contextPath: CVE.Description description: A description of the CVE. type: String - contextPath: CVE.Tags description: The tags of the CVE. type: String - contextPath: CVE.VulnerableProducts description: The vulnerable products of the CVE. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: string - contextPath: DBotScore.Reliability description: The reliability of the vendor. type: string - contextPath: DBotScore.Score description: The actual score. type: number - contextPath: DBotScore.Type description: The indicator type. type: string - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: string - contextPath: Ignite.Vulnerability.id description: The unique identifier of the vulnerability. type: Number - contextPath: Ignite.Vulnerability.cve_ids description: A list of CVE IDs associated with the vulnerability. type: Unknown - contextPath: Ignite.Vulnerability.title description: The title of the vulnerability. type: String - contextPath: Ignite.Vulnerability.keywords description: A list of keywords associated with the vulnerability. type: String - contextPath: Ignite.Vulnerability.description description: The description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.solution description: The solution or remediation steps for the vulnerability. type: String - contextPath: Ignite.Vulnerability.technical_description description: The technical description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.published_at description: The date when the vulnerability was published. type: Date - contextPath: Ignite.Vulnerability.timelines.last_modified_at description: The date when the vulnerability was last modified. type: Date - contextPath: Ignite.Vulnerability.timelines.exploit_published_at description: The date when the exploit was published. type: Date - contextPath: Ignite.Vulnerability.timelines.discovered_at description: The date when the vulnerability was discovered. type: Date - contextPath: Ignite.Vulnerability.timelines.disclosed_at description: The date when the vulnerability was disclosed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_informed_at description: The date when the vendor was informed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_acknowledged_at description: The date when the vendor acknowledged the vulnerability. type: Date - contextPath: Ignite.Vulnerability.timelines.third_party_solution_provided_at description: The date when a third-party solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.solution_provided_at description: The date when a solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.exploited_in_the_wild_at description: The date when the vulnerability was exploited in the wild. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_response_time description: The time taken for vendor response. type: String - contextPath: Ignite.Vulnerability.timelines.time_to_patch description: The time taken to patch the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.total_time_to_patch description: The total time taken to patch the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.time_unpatched description: The time the vulnerability remained unpatched. type: String - contextPath: Ignite.Vulnerability.timelines.time_to_exploit description: The time taken to exploit the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.total_time_to_exploit description: The total time taken to exploit the vulnerability. type: String - contextPath: Ignite.Vulnerability.scores.epss_score description: An EPSS (Exploit Prediction Scoring System) score. type: Number - contextPath: Ignite.Vulnerability.scores.epss_v1_score description: An EPSS version 1 score. type: Number - contextPath: Ignite.Vulnerability.scores.ransomware_score description: A ransomware score. type: Number - contextPath: Ignite.Vulnerability.scores.severity description: The severity level of the vulnerability. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.cve_id description: The CVE ID associated with the social risk score. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.numeric_score description: A numeric social risk score. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.categorical_score description: A categorical social risk score. type: String - contextPath: Ignite.Vulnerability.scores.social_risk_scores.score_date description: The date when the social risk score was calculated. type: Date - contextPath: Ignite.Vulnerability.scores.social_risk_scores.todays_tweets description: The number of tweets today about the vulnerability. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.total_tweets description: The total number of tweets about the vulnerability. type: Number - contextPath: Ignite.Vulnerability.scores.social_risk_scores.unique_users description: The number of unique users discussing the vulnerability. type: Number - contextPath: Ignite.Vulnerability.vuln_status description: The status of the vulnerability. type: String - contextPath: Ignite.Vulnerability.alternate_vulndb_id description: An alternate VulnDB ID. type: String - contextPath: Ignite.Vulnerability.changelog.created_at description: The date when the changelog entry was created. type: Date - contextPath: Ignite.Vulnerability.changelog.description description: The description of the changelog entry. type: String - contextPath: Ignite.Vulnerability.cwes.cwe_id description: The CWE identifier. type: String - contextPath: Ignite.Vulnerability.cwes.name description: The name of the CWE. type: String - contextPath: Ignite.Vulnerability.exploits.value description: An exploit URL or identifier. type: String - contextPath: Ignite.Vulnerability.exploits.type description: The type of exploit (e.g., Exploit Database). type: String - contextPath: Ignite.Vulnerability.exploits_count description: The count of exploits associated with the vulnerability. type: Number - contextPath: Ignite.Vulnerability.ext_references.value description: A value of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.type description: The type of external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.created_at description: The date when the external reference was created. type: Date - contextPath: Ignite.Vulnerability.ext_references.description description: The description of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.url description: The URL of the external reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cve_id description: The CVE ID from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.summary description: The summary from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cwes.cwe_id description: The CWE identifier from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cwes.name description: The name of the CWE from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.references.name description: The name of the NVD reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.references.url description: The URL of the NVD reference. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.access_vector description: The CVSS v2 access vector from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.access_complexity description: The CVSS v2 access complexity from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.authentication description: The CVSS v2 authentication from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.confidentiality_impact description: The CVSS v2 confidentiality impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.integrity_impact description: The CVSS v2 integrity impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v2s.availability_impact description: The CVSS v2 availability impact from NVD. type: Number - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.attack_vector description: The CVSS v3 attack vector from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.attack_complexity description: The CVSS v3 attack complexity from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.privileges_required description: The CVSS v3 privileges required from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.user_interaction description: The CVSS v3 user interaction from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.scope description: The CVSS v3 scope from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.confidentiality_impact description: The CVSS v3 confidentiality impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.integrity_impact description: The CVSS v3 integrity impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.availability_impact description: The CVSS v3 availability impact from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.score description: The CVSS v3 score from NVD. type: Number - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.vector_string description: The CVSS v3 vector string from NVD. type: String - contextPath: Ignite.Vulnerability.nvd_additional_information.cvss_v3s.version description: The CVSS v3 version from NVD. type: String - contextPath: Ignite.Vulnerability.classifications.name description: The name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.longname description: The long name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.description description: The description of the classification. type: String - contextPath: Ignite.Vulnerability.creditees.name description: The name of the individual or organization credited. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.access_vector description: The CVSS v2 access vector. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.access_complexity description: The CVSS v2 access complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.authentication description: The CVSS v2 authentication. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.confidentiality_impact description: The CVSS v2 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.integrity_impact description: The CVSS v2 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.availability_impact description: The CVSS v2 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.source description: The source of the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.generated_at description: The date when the CVSS v2 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v2s.cve_id description: The CVE ID associated with the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.score description: The CVSS v2 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v2s.calculated_cvss_base_score description: A calculated CVSS v2 base score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.attack_vector description: The CVSS v3 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.attack_complexity description: The CVSS v3 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.privileges_required description: The CVSS v3 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.user_interaction description: The CVSS v3 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.scope description: The CVSS v3 scope. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.confidentiality_impact description: The CVSS v3 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.integrity_impact description: The CVSS v3 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.availability_impact description: The CVSS v3 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.source description: The source of the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.generated_at description: The date when the CVSS v3 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v3s.cve_id description: The CVE ID associated with the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.score description: The CVSS v3 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.vector_string description: The CVSS v3 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.version description: The CVSS v3 version. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.remediation_level description: The CVSS v3 remediation level. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.report_confidence description: The CVSS v3 report confidence. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.exploit_code_maturity description: The CVSS v3 exploit code maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.temporal_score description: The CVSS v3 temporal score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.updated_at description: The date when the CVSS v3 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.score description: The CVSS v4 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.threat_score description: The CVSS v4 threat score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.source description: The source of the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.generated_at description: The date when the CVSS v4 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.updated_at description: The date when the CVSS v4 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.cve_id description: The CVE ID associated with the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vector_string description: The CVSS v4 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.version description: The CVSS v4 version. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_vector description: The CVSS v4 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_complexity description: The CVSS v4 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_requirements description: The CVSS v4 attack requirements. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.privileges_required description: The CVSS v4 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.user_interaction description: The CVSS v4 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.exploit_maturity description: The CVSS v4 exploit maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_confidentiality_impact description: The CVSS v4 vulnerable system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_integrity_impact description: The CVSS v4 vulnerable system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_availability_impact description: The CVSS v4 vulnerable system availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_confidentiality_impact description: The CVSS v4 subsequent system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_integrity_impact description: The CVSS v4 subsequent system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_availability_impact description: The CVSS v4 subsequent system availability impact. type: String - contextPath: Ignite.Vulnerability.tags description: The tags associated with the vulnerability. type: String - contextPath: Ignite.Vulnerability.products.id description: The ID of the affected product. type: Number - contextPath: Ignite.Vulnerability.products.name description: The name of the affected product. type: String - contextPath: Ignite.Vulnerability.products.vendor_id description: The vendor ID of the affected product. type: Number - contextPath: Ignite.Vulnerability.products.vendor description: The vendor name of the affected product. type: String - contextPath: Ignite.Vulnerability.products.versions.id description: The ID of the product version. type: Number - contextPath: Ignite.Vulnerability.products.versions.vulndb_version_id description: The VulnDB version ID. type: Number - contextPath: Ignite.Vulnerability.products.versions.name description: The name of the product version. type: String - contextPath: Ignite.Vulnerability.products.versions.affected description: A string indicating whether the product version is affected. type: String - contextPath: Ignite.Vulnerability.products.versions.all_prior_versions_affected description: A boolean indicating whether all prior versions are affected. type: Boolean - contextPath: Ignite.Vulnerability.products.versions.cpes.name description: The CPE (Common Platform Enumeration) name. type: String - contextPath: Ignite.Vulnerability.products.versions.cpes.source description: The source of the CPE. type: String description: Retrieves detailed information about a specific CVE by its CVE ID. - name: flashpoint-ignite-vulnerability-list arguments: - description: "Filter by the vulnerability IDs assigned by Flashpoint. Supports comma-separated values.\n\nExample: 463513, FP-VULN-463512." name: vulnerability_ids isArray: true - description: "Get vulnerabilities that were updated after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: updated_after - description: "Get vulnerabilities that were updated before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: updated_before - description: "Get vulnerabilities that were disclosed after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: disclosed_after - description: "Get vulnerabilities that were disclosed before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: disclosed_before - description: "Get vulnerabilities that were published after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: published_after - description: "Get vulnerabilities that were published before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: published_before - description: "Get vulnerabilities that were last touched after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: last_touched_after - description: "Get vulnerabilities that were last touched before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." name: last_touched_before - description: Filter by Ransomware score. name: ransomware_scores isArray: true auto: PREDEFINED predefined: - Critical - High - Medium - Low - description: Filter by Attack type classification. name: attack_types isArray: true auto: PREDEFINED predefined: - Authentication Management - Cryptographic - Infrastructure - Input Manipulation - Misconfiguration - Man-In-The-Middle (MITM) - Other - Race Condition - Attack Type Unknown - description: Filter by severity, which is calculated based on CVSS values. name: severities isArray: true auto: PREDEFINED predefined: - Critical - High - Medium - Low - Informational - description: Filter by associated product names (case-insensitive). name: products isArray: true - description: Filter by associated vendor names (case-insensitive). name: vendors isArray: true - description: Filter by CWE IDs assigned by Mitre. name: cwe_ids isArray: true - description: "Filter by lower limit of the CVSSv2 score. Prioritizes Flashpoint generated scores when possible. Example value 7.0\n\nNote: Value must be a float between 0 and 10." name: min_cvssv2_score - description: "Filter by upper limit of the CVSSv2 score. Prioritizes Flashpoint generated scores when possible. Example value 10.0\n\nNote: Value must be a float between 0 and 10." name: max_cvssv2_score - description: "Filter by lower limit of the CVSSv3 score. Prioritizes Flashpoint generated scores when possible. Example value 7.0\n\nNote: Value must be a float between 0 and 10." name: min_cvssv3_score - description: "Filter by upper limit of the CVSSv3 score. Prioritizes Flashpoint generated scores when possible. Example value 10.0\n\nNote: Value must be a float between 0 and 10." name: max_cvssv3_score - description: "Filter by lower limit of the CVSSv4 score. Prioritizes Flashpoint generated scores when possible. Example value 7.0\n\nNote: Value must be a float between 0 and 10." name: min_cvssv4_score - description: "Filter by upper limit of the CVSSv4 score. Prioritizes Flashpoint generated scores when possible. Example value 10.0\n\nNote: Value must be a float between 0 and 10." name: max_cvssv4_score - description: Filter by reference types. name: ref_types isArray: true auto: PREDEFINED predefined: - Bug Tracker - Bugtraq ID - CERT - CERT VU - CIAC Advisory - CVE ID - D2 Elliot - DISA IAVA - Exploit Activity - Exploit Database - Flashpoint - Generic Exploit URL - Generic Informational URL - Immunity CANVAS - Immunity CANVAS (D2ExploitPack) - Immunity CANVAS (White Phosphorus) - ISS X-Force ID - Japan Vulnerability Notes - Keyword - Mail List Post - Metasploit URL - Microsoft Knowledge Base Article - Microsoft Security Bulletin - Nessus Script ID - News Article - Nikto Item ID - Other Advisory URL - Other Solution URL - OVAL ID - Packet Storm - RedHat RHSA - Related VulnDB ID - SCIP VulDB ID - Secunia Advisory ID - Security Tracker - Snort Signature ID - Tenable PVS - US-CERT Cyber Security Alert - Vendor Specific Advisory URL - Vendor Specific Solution URL - Vendor URL - Vendor Specific News/Changelog Entry - VUPEN Advisory - description: Filter by reference values. Use with Reference Types to filter by specific reference type. name: ref_values isArray: true - description: Filter by location type classification. name: locations isArray: true auto: PREDEFINED predefined: - Context Dependent - Dial-up Access Required - Local Access Required - "Legacy: Local / Remote" - "Mobile Phone / Hand-held Device" - Physical Access Required - "Remote / Network Access" - Location Unknown - Wireless Vector - description: "Filter by lower limit of the EPSS v3 score. Example value 0.5\n\nNote: Value must be a float between 0 and 1." name: min_epss_score - description: "Filter by upper limit of the EPSS v3 score. Example value 1.0\n\nNote: Value must be a float between 0 and 1." name: max_epss_score - description: Filter vulnerabilities by tags. name: tags isArray: true - description: 'Number of vulnerabilities to return per page. Maximum value: 1000.' name: size defaultValue: '10' - description: The offset to retrieve next page data. Used for pagination only. name: from defaultValue: '0' - description: Specify the field used to sort the vulnerabilities. name: sort_by defaultValue: 'Published At' auto: PREDEFINED predefined: - ID - Severity - Title - CVSSv3 Score - Published At - description: Specify the order used to sort the vulnerabilities. name: sort_order defaultValue: 'Desc' auto: PREDEFINED predefined: - Asc - Desc outputs: - contextPath: Ignite.Vulnerability.id description: The unique identifier of the vulnerability. type: Number - contextPath: Ignite.Vulnerability.cve_ids description: A list of CVE IDs associated with the vulnerability. type: Unknown - contextPath: Ignite.Vulnerability.title description: The title of the vulnerability. type: String - contextPath: Ignite.Vulnerability.keywords description: A list of keywords associated with the vulnerability. type: String - contextPath: Ignite.Vulnerability.description description: The description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.solution description: The solution or remediation steps for the vulnerability. type: String - contextPath: Ignite.Vulnerability.technical_description description: The technical description of the vulnerability. type: String - contextPath: Ignite.Vulnerability.timelines.published_at description: The date when the vulnerability was published. type: Date - contextPath: Ignite.Vulnerability.timelines.last_modified_at description: The date when the vulnerability was last modified. type: Date - contextPath: Ignite.Vulnerability.timelines.exploit_published_at description: The date when the exploit was published. type: Date - contextPath: Ignite.Vulnerability.timelines.discovered_at description: The date when the vulnerability was discovered. type: Date - contextPath: Ignite.Vulnerability.timelines.disclosed_at description: The date when the vulnerability was disclosed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_informed_at description: The date when the vendor was informed. type: Date - contextPath: Ignite.Vulnerability.timelines.vendor_acknowledged_at description: The date when the vendor acknowledged the vulnerability. type: Date - contextPath: Ignite.Vulnerability.timelines.third_party_solution_provided_at description: The date when a third-party solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.solution_provided_at description: The date when a solution was provided. type: Date - contextPath: Ignite.Vulnerability.timelines.exploited_in_the_wild_at description: The date when the vulnerability was exploited in the wild. type: Date - contextPath: Ignite.Vulnerability.scores.epss_score description: An EPSS (Exploit Prediction Scoring System) score. type: Number - contextPath: Ignite.Vulnerability.scores.cvssv3_score description: A CVSS v3 score. type: Number - contextPath: Ignite.Vulnerability.scores.epss_v1_score description: An EPSS version 1 score. type: Number - contextPath: Ignite.Vulnerability.scores.ransomware_score description: A ransomware score. type: Number - contextPath: Ignite.Vulnerability.scores.severity description: The severity level of the vulnerability. type: String - contextPath: Ignite.Vulnerability.vuln_status description: The status of the vulnerability. type: String - contextPath: Ignite.Vulnerability.cwes.cwe_id description: The CWE identifier. type: String - contextPath: Ignite.Vulnerability.cwes.name description: The name of the CWE. type: String - contextPath: Ignite.Vulnerability.ext_references.value description: A value of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.type description: The type of external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.created_at description: The date when the external reference was created. type: Date - contextPath: Ignite.Vulnerability.ext_references.description description: The description of the external reference. type: String - contextPath: Ignite.Vulnerability.ext_references.url description: The URL of the external reference. type: String - contextPath: Ignite.Vulnerability.classifications.name description: The name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.longname description: The long name of the classification. type: String - contextPath: Ignite.Vulnerability.classifications.description description: The description of the classification. type: String - contextPath: Ignite.Vulnerability.exploits.value description: An exploit URL or identifier. type: String - contextPath: Ignite.Vulnerability.exploits.type description: The type of exploit (e.g., Exploit Database). type: String - contextPath: Ignite.Vulnerability.exploits_count description: The count of exploits associated with the vulnerability. type: Number - contextPath: Ignite.Vulnerability.cvss_v2s.access_vector description: The CVSS v2 access vector. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.access_complexity description: The CVSS v2 access complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.authentication description: The CVSS v2 authentication. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.confidentiality_impact description: The CVSS v2 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.integrity_impact description: The CVSS v2 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.availability_impact description: The CVSS v2 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.source description: The source of the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.generated_at description: The date when the CVSS v2 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v2s.cve_id description: The CVE ID associated with the CVSS v2 score. type: String - contextPath: Ignite.Vulnerability.cvss_v2s.score description: The CVSS v2 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v2s.calculated_cvss_base_score description: A calculated CVSS v2 base score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.attack_vector description: The CVSS v3 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.attack_complexity description: The CVSS v3 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.privileges_required description: The CVSS v3 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.user_interaction description: The CVSS v3 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.scope description: The CVSS v3 scope. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.confidentiality_impact description: The CVSS v3 confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.integrity_impact description: The CVSS v3 integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.availability_impact description: The CVSS v3 availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.source description: The source of the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.generated_at description: The date when the CVSS v3 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v3s.cve_id description: The CVE ID associated with the CVSS v3 score. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.score description: The CVSS v3 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.calculated_cvss_base_score description: A calculated CVSS v3 base score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.vector_string description: The CVSS v3 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.version description: The CVSS v3 version. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.remediation_level description: The CVSS v3 remediation level. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.report_confidence description: The CVSS v3 report confidence. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.exploit_code_maturity description: The CVSS v3 exploit code maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v3s.temporal_score description: The CVSS v3 temporal score. type: Number - contextPath: Ignite.Vulnerability.cvss_v3s.updated_at description: The date when the CVSS v3 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.score description: The CVSS v4 score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.threat_score description: The CVSS v4 threat score. type: Number - contextPath: Ignite.Vulnerability.cvss_v4s.source description: The source of the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.generated_at description: The date when the CVSS v4 score was generated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.updated_at description: The date when the CVSS v4 score was updated. type: Date - contextPath: Ignite.Vulnerability.cvss_v4s.cve_id description: The CVE ID associated with the CVSS v4 score. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vector_string description: The CVSS v4 vector string. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.version description: The CVSS v4 version. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_vector description: The CVSS v4 attack vector. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_complexity description: The CVSS v4 attack complexity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.attack_requirements description: The CVSS v4 attack requirements. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.privileges_required description: The CVSS v4 privileges required. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.user_interaction description: The CVSS v4 user interaction. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.exploit_maturity description: The CVSS v4 exploit maturity. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_confidentiality_impact description: The CVSS v4 vulnerable system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_integrity_impact description: The CVSS v4 vulnerable system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.vulnerable_system_availability_impact description: The CVSS v4 vulnerable system availability impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_confidentiality_impact description: The CVSS v4 subsequent system confidentiality impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_integrity_impact description: The CVSS v4 subsequent system integrity impact. type: String - contextPath: Ignite.Vulnerability.cvss_v4s.subsequent_system_availability_impact description: The CVSS v4 subsequent system availability impact. type: String - contextPath: Ignite.Vulnerability.products.id description: The unique numeric identifier assigned by Flashpoint for a single product. type: Number - contextPath: Ignite.Vulnerability.products.name description: The product name. type: String - contextPath: Ignite.Vulnerability.vendors.id description: The unique numeric identifier assigned by Flashpoint for a single vendor. type: Number - contextPath: Ignite.Vulnerability.vendors.name description: The vendor name. type: String - contextPath: Ignite.Vulnerability.tags description: The tags associated with the vulnerability. type: String description: List Vulnerabilities using provided filters. - name: flashpoint-ignite-vulnerability-library-list arguments: - name: vulnerability_id required: true description: The Flashpoint vulnerability ID. - name: from defaultValue: '0' description: The offset to retrieve next page data. Used for pagination only. - name: size defaultValue: '10' description: 'Number of libraries to return per page. Maximum value: 1000.' - name: sort_by auto: PREDEFINED description: Specify the field used to sort the libraries. defaultValue: ID predefined: - ID - Name - name: sort_order auto: PREDEFINED description: Specify the order to sort the libraries. defaultValue: Asc predefined: - Asc - Desc - name: library_ids description: Flashpoint library ID(s) to filter by. Supports a comma-separated values. isArray: true - name: library_name description: The library name to filter by (case-insensitive). - name: query description: Search libraries by namespace, name, version, type, etc. outputs: - contextPath: Ignite.Library.id description: The unique identifier of the library. type: Number - contextPath: Ignite.Library.namespace description: The namespace of the library. type: String - contextPath: Ignite.Library.name description: The name of the library. type: String - contextPath: Ignite.Library.version description: The version of the library. type: String - contextPath: Ignite.Library.qualifiers description: The qualifiers of the library. type: String - contextPath: Ignite.Library.subpath description: The subpath of the library. type: String - contextPath: Ignite.Library.type description: The type of the library (e.g., pypi, npm, maven). type: String - contextPath: Ignite.Library.purl description: The package URL of the library. type: String - contextPath: Ignite.Library.affected description: Whether the library is affected by the vulnerability. type: Boolean - contextPath: Ignite.Library.constructed_purl description: The constructed package URL of the library including name and version. type: String description: Retrieves a list of libraries that are affected by a particular vulnerability. - name: flashpoint-ignite-vulnerability-package-list arguments: - name: vulnerability_id required: true description: The Flashpoint vulnerability ID. - name: from defaultValue: '0' description: The offset to retrieve next page data. Used for pagination only. - name: size defaultValue: '10' description: 'Number of packages to return per page. Maximum value: 1000.' - name: sort_by auto: PREDEFINED description: Specify the field used to sort the packages. defaultValue: ID predefined: - ID - Name - name: sort_order auto: PREDEFINED description: Specify the order to sort the packages. defaultValue: Asc predefined: - Asc - Desc - name: package_ids description: Flashpoint package ID(s) to filter by. Supports comma-separated integer values. isArray: true - name: package_name description: The package name to filter by (case-insensitive). - name: query description: Search packages by name, version, operating system, etc. outputs: - contextPath: Ignite.Package.id description: The unique identifier of the package. type: Number - contextPath: Ignite.Package.name description: The name of the package. type: String - contextPath: Ignite.Package.version description: The version of the package. type: String - contextPath: Ignite.Package.filename description: The filename of the package. type: String - contextPath: Ignite.Package.os description: The operating system associated with the package. type: String - contextPath: Ignite.Package.os_version description: The version of the operating system. type: String - contextPath: Ignite.Package.os_arch description: The architecture of the operating system. type: String - contextPath: Ignite.Package.purl description: The Package URL (purl) of the package. type: String - contextPath: Ignite.Package.operator description: The operator indicating the version constraint relationship. type: String - contextPath: Ignite.Package.affected description: Whether the package is affected by the vulnerability. type: Boolean description: Retrieves a list of packages that are affected by a particular vulnerability. - name: flashpoint-ignite-vendor-list arguments: - name: from defaultValue: '0' description: The offset to retrieve next page data. Used for pagination only. - name: size defaultValue: '10' description: 'Number of packages to return per page. Maximum value: 1000.' - name: vendor_ids description: Flashpoint vendor ID(s) to filter by. Supports comma-separated integer values. isArray: true - name: vendor_name description: The vendor name to filter by (case-insensitive). - name: updated_after description: "Get vendors that were updated after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." - name: updated_before description: "Get vendors that were updated before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." outputs: - contextPath: Ignite.Vendor.id description: The unique identifier of the vendor. type: Number - contextPath: Ignite.Vendor.name description: The name of the vendor. type: String description: List vendors using provided filters. - name: flashpoint-ignite-product-list arguments: - name: from defaultValue: '0' description: The offset to retrieve next page data. Used for pagination only. - name: size defaultValue: '10' description: 'Number of products to return per page. Maximum value: 1000.' - name: product_ids description: Flashpoint product ID(s) to filter by. Supports comma-separated integer values. isArray: true - name: product_name description: The product name to filter by (case-insensitive). - name: vendor_ids description: Flashpoint vendor ID(s) to filter by. Supports comma-separated integer values. isArray: true - name: updated_after description: "Get products that were updated after the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." - name: updated_before description: "Get products that were updated before the specified date or relative timestamp.\n\nFormats accepted: 2 minutes, 2 hours, 2 days, 2 weeks, 2 months, 2 years, yyyy-mm-dd, yyyy-mm-ddTHH:MM:SSZ." outputs: - contextPath: Ignite.Product.id description: The unique identifier of the product. type: Number - contextPath: Ignite.Product.name description: The name of the product. type: String - contextPath: Ignite.Product.vendor.id description: The unique identifier of the vendor associated with the product. type: Number - contextPath: Ignite.Product.vendor.name description: The name of the vendor associated with the product. type: String - contextPath: Ignite.Product.versions description: List of versions associated with the product. type: List description: List products using provided filters. script: '' type: python dockerimage: demisto/python3:3.12.13.11879924 isfetch: true runonce: false subtype: python3 tests: - Ignite-Test defaultmapperin: "Flashpoint Compromised Credentials - Incoming Mapper" fromversion: 6.10.0