commonfields:
  id: ReversingLabs Ransomware and Related Tools Feed
  version: -1
name: ReversingLabs Ransomware and Related Tools Feed
display: ReversingLabs Ransomware and Related Tools Feed
deprecated: true
category: Data Enrichment & Threat Intelligence
provider: ReversingLabs
description: Deprecated. Use TAXII 2 Feed to connect to the ReversingLabs Ransomware and Related Tools TAXII Feed.
configuration:
- defaultvalue: 'true'
  display: Fetch indicators
  name: feed
  type: 8
  required: false
- display: ReversingLabs TitaniumCloud URL
  name: host
  defaultvalue: "https://data.reversinglabs.com"
  type: 0
  required: true
- display: Credentials
  name: credentials
  required: true
  type: 9
- additionalinfo: Indicators from this integration instance will be marked with this reputation
  display: Indicator Reputation
  name: feedReputation
  options:
  - None
  - Good
  - Suspicious
  - Bad
  type: 18
  required: false
- additionalinfo: Reliability of the source providing the intelligence data
  display: Source Reliability
  name: feedReliability
  options:
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  required: true
  type: 15
- display: ""
  name: feedExpirationPolicy
  defaultvalue: indicatorType
  type: 17
  options:
  - never
  - interval
  - indicatorType
  - suddenDeath
  required: false
- display: ""
  name: feedExpirationInterval
  defaultvalue: "20160"
  type: 1
  required: false
- display: Feed Fetch Interval
  name: feedFetchInterval
  type: 19
  required: false
- display: Bypass exclusion list
  name: feedBypassExclusionList
  type: 8
  additionalinfo: When selected, the exclusion list is ignored for indicators from this feed. This means that if an indicator from this feed is on the exclusion list, the indicator might still be added to the system.
  required: false
- display: First fetch time
  defaultvalue: 2
  name: hours
  type: 0
  additionalinfo: Defines how many hours back in time should the indicators be fetched from during the first run. Value should be between 1 and 4. Recommended value is 2.
  required: false
- display: Indicator types
  name: indicatorTypes
  defaultvalue: ipv4,domain,hash,uri
  additionalinfo: Which types of indicators should be fetched from the feed. Possible values are 'ipv4', 'domain', 'hash', 'uri'.
  type: 16
  options:
  - ipv4
  - domain
  - hash
  - uri
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- additionalinfo: Supports CSV values.
  display: Tags
  name: feedTags
  type: 0
  required: false
- name: tlp_color
  display: Traffic Light Protocol Color
  options:
  - RED
  - AMBER
  - GREEN
  - WHITE
  type: 15
  additionalinfo: The Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed
  required: false
script:
  script: ''
  type: python
  commands:
  - name: reversinglabs-get-indicators
    arguments:
    - name: limit
      defaultValue: 50
      description: The maximum number of indicators to return. The default value is 50.
    - name: indicator_types
      defaultValue: 'ipv4,domain,hash,uri'
      description: Which indicator types should be fetched from the feed. Possible values are 'ipv4', 'domain', 'hash', 'uri'.
    - name: hours_back
      defaultValue: 1
      description: Defines how many hours back in time should the indicators be fetched from. Value should be between 1 and 4. Recommended value is 1.
    description: Gets indicators from the feed.
  dockerimage: demisto/python3:3.12.8.3296088
  feed: true
  subtype: python3
fromversion: 6.0.0
tests:
- No tests (auto formatted)