category: Analytics & SIEM provider: QueryAI Inc. commonfields: id: Query.AI version: -1 configuration: - display: Query.AI Proxy URL name: url required: true type: 0 - display: API Token name: api_token required: true type: 4 - display: Default Platform Alias name: alias required: true type: 0 - display: Default Platform Connection Params. additionalinfo: Connection params as JSON object. Eg - {"platform_alias":{"username":"my_username","password":"my_password"}} name: connection_params required: true type: 12 - display: Request Timeout (in seconds). additionalinfo: Default value is 60 seconds. name: timeout type: 0 required: false - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false description: Query.AIĀ is a decentralized data access and analysis technology that simplifies security investigations across disparate platforms without data duplication. display: Query.AI name: Query.AI script: commands: - arguments: - description: Search Query. name: query required: true - description: Platform Alias. name: alias - description: Connection params as JSON object. Eg- {"platform_alias":{"username":"my_username","password":"my_password"}}. name: connection_params - description: Workflow params as JSON object.(If workflow requires params) Eg- {"param1":"value1","param2":"value2"}. name: workflow_params - description: Search time period. Eg- "search 1 year ago to now". name: time_text description: Returns response for the query being run on Query.AI. name: queryai-run-query outputs: - contextPath: QueryAI.query.result description: Response after running query. type: Unknown - contextPath: QueryAI.query.markdown_string description: Readable Response after running query. type: String dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' subtype: python3 type: python tests: - No tests fromversion: 5.0.0