category: Data Enrichment & Threat Intelligence
provider: Qintel
commonfields:
  id: QintelQWatch
  version: -1
configuration:
- display: QWatch API URL (optional)
  name: remote
  type: 0
  required: false
- display: Qintel Credentials
  name: credentials
  required: true
  type: 9
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
- display: Fetch plaintext passwords
  name: fetch_passwords
  type: 8
  defaultvalue: 'true'
  required: false
- display: Limit number of records per fetch
  name: max_fetch
  type: 0
  defaultvalue: 10000
  required: false
- display: First fetch time
  name: first_fetch
  defaultvalue: 3 days
  type: 0
  required: false
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: "360"
  type: 19
  required: false
- display: Default Incident Severity
  name: fetch_severity
  defaultvalue: Medium
  type: 15
  required: true
  options:
  - Unknown
  - Info
  - Low
  - Medium
  - High
  - Critical
- display: Incident type
  name: incidentType
  type: 13
  required: false
description: "Qintel's QWatch system contains credentials obtained from dump sites, hacker collaboratives, and command and control infrastructures of eCrime- and APT-related malware. With this integration, users can fetch exposure alerts as incidents and discover exposed credentials associated with their organization."
display: Qintel QWatch
name: QintelQWatch
script:
  commands:
  - arguments:
    - description: Email to search.
      name: email
    - description: Domain to search.
      name: domain
    description: Search QWatch for exposed credentials.
    name: qintel-qwatch-exposures
    outputs:
    - contextPath: Qintel.QWatch.Exposures
      description: QWatch Exposure Records.
      type: String
  isfetch: true
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10116658
fromversion: 6.0.0
tests:
- No tests (auto formatted)