category: Network Security
sectionorder:
- Connect
- Collect
provider: BlueCat Networks
commonfields:
  id: Indeni
  version: -1
configuration:
- defaultvalue: 'false'
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- display: API Key
  name: apikey
  required: true
  type: 4
  section: Connect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- additionalinfo: If true, only Palo Alto Networks Vulnerability issues will be pulled. If false, all issues will be pulled.
  defaultvalue: 'true'
  display: Only Pull Palo Alto Networks Vulnerability Issues
  name: onlyPullPanCveIssues
  type: 8
  required: false
  section: Collect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- defaultvalue: INFO
  display: Lowest Issue Severity To Pull
  name: issueSeverity
  options:
  - CRITICAL
  - ERROR
  - WARN
  - INFO
  type: 15
  required: false
  section: Collect
- defaultvalue: '20'
  display: Number of issues to pull per fetch
  name: maxPullSize
  type: 0
  required: false
  section: Collect
description: Indeni is a turn-key automated monitoring providing visibility for security infrastructure. Indeni's production-ready Knowledge is curated from vetted, community-sourced experience, to deliver automation of tedious tasks with integration with your existing processes.
display: Indeni
name: Indeni
script:
  commands:
  - arguments:
    - description: device id string.
      name: device_id
      required: true
    description: get the device information.
    name: indeni-get-device-info
    outputs:
    - contextPath: Indeni.DeviceInfo.DeviceId
      description: device id string.
      type: string
    - contextPath: Indeni.DeviceInfo.DeviceIP
      description: device ip string.
      type: string
    - contextPath: Indeni.DeviceInfo.DeviceName
      description: device hostname.
      type: string
    - contextPath: Indeni.DeviceInfo.DeviceModel
      description: device model.
      type: string
    - contextPath: Indeni.DeviceInfo.OSVersion
      description: device OS version.
      type: string
    - contextPath: Indeni.DeviceInfo.CriticalAlertStats
      description: '# of critical alerts on the device.'
      type: number
    - contextPath: Indeni.DeviceInfo.ErrorAlertStats
      description: '# of error alerts on the device.'
      type: number
    - contextPath: Indeni.DeviceInfo.WarnAlertStats
      description: '# of warn alerts on the device.'
      type: number
    - contextPath: Indeni.DeviceInfo.InfoAlertStats
      description: '# of info alerts on the device.'
      type: number
  - arguments:
    - description: the id of the alert.
      name: alert_id
      required: true
    description: Get detailed alert info.
    name: indeni-get-alert-info
    outputs:
    - contextPath: Indeni.AlertInfo.AlertId
      description: id of the alert.
      type: string
    - contextPath: Indeni.AlertInfo.Headline
      description: headline of the alert.
      type: string
    - contextPath: Indeni.AlertInfo.DeviceId
      description: device id.
      type: string
    - contextPath: Indeni.AlertInfo.AlertType
      description: the alert type unique identifier.
      type: string
  - arguments:
    - description: identifier for alert type.
      name: alert_type_identifier
      required: true
    description: Get summary of given alert type for all devices.
    name: indeni-get-alert-summary
    outputs:
    - contextPath: Indeni.AffectedDevices.AlertType
      description: Alert type that's affecting the devices.
      type: String
    - contextPath: Indeni.AffectedDevices.Device.DeviceName
      description: Name of the affected device.
      type: String
    - contextPath: Indeni.AffectedDevices.Device.DeviceId
      description: Id of the affected device.
      type: String
  - arguments:
    - description: the id of the alert.
      name: alert_id
      required: true
    - description: the content of the note.
      name: note
      required: true
    description: Post a note to a given issue id.
    name: indeni-post-note
  - arguments:
    - description: the alert id of the issue.
      name: alert_id
      required: true
    description: Archive an issue for the given alert id.
    name: indeni-archive-issue
  - arguments:
    - description: the alert id of the issue.
      name: alert_id
      required: true
    description: Unarchive an existing issue.
    name: indeni-unarchive-issue
  - arguments:
    - description: The id of the alert.
      name: alert_id
      required: true
    description: Get the notes from issue.
    name: indeni-get-notes
    outputs:
    - contextPath: Indeni.AlertInfo.Note
      description: Notes for the given issue.
      type: Unknown
  dockerimage: demisto/python3:3.12.8.3296088
  isfetch: true
  longRunning: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
fromversion: 5.0.0
defaultclassifier: Indeni
defaultmapperin: Indeni-mapper
tests:
- No tests (auto formatted)