category: Data Enrichment & Threat Intelligence
sectionorder:
- Connect
- Collect
provider: Netskope
description: Append HyperContext™ insights to your SIEM data and feed them into your orchestration workflows.
display: WootCloud
name: WootCloud
commonfields:
  id: WootCloud
  version: -1
configuration:
- display: Client ID
  name: client_id
  defaultvalue: ""
  type: 0
  required: true
  section: Connect
- display: API Key
  name: secret_key
  defaultvalue: ""
  type: 4
  required: true
  section: Connect
- display: Time to retrieve the first fetch (<number> <time unit>, e.g., 12 hours, 7 days)
  name: fetch_time
  type: 0
  defaultvalue: 3 days
  required: false
  section: Collect
- display: Alert Type
  name: alert_type
  required: true
  type: 15
  options:
  - packet
  - bluetooth
  - anomaly
  section: Collect
- display: Severity Type
  name: severity_type
  type: 15
  options:
  - notice
  - info
  - warning
  - critical
  - low
  - medium
  - high
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
script:
  commands:
  - name: wootcloud-get-pkt-alerts
    description: list packet alerts generated in requested time span
    arguments:
    - name: date_range
      description: Examples are (2 hours, 4 minutes, 6 month, 1 day, etc.)
      required: true
    - name: severity
      description: severity with values of 'notice', 'warning', 'critical'.
      defaultValue:
    - name: skip
      description: 'Integer value for pagination. Default value is 0.'
      defaultValue: 0
    - name: limit
      description: 'Integer value for pagination. Default value: 10. Max Value: 500.'
      defaultValue: 10
    - name: site_id
      description: Array of site ids. Only entered if you want results for a particular site(s) (building, city, region).
    outputs:
    - contextPath: WootCloud.PacketAlert.id
      description: 'ID of alert.'
      type: String
    - contextPath: WootCloud.PacketAlert.address
      description: 'Mac Address of device.'
      type: String
    - contextPath: WootCloud.PacketAlert.timestamp
      description: 'Alert timestamp.'
      type: Date
    - contextPath: WootCloud.PacketAlert.severity
      description: 'Severity level.'
      type: String
    - contextPath: WootCloud.PacketAlert.category
      description: 'Alert Category.'
      type: String
    - contextPath: WootCloud.PacketAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.city
      description: 'source city.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.continent
      description: 'source continent.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.country
      description: 'source country.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.ip
      description: 'source ip.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.latitude
      description: 'source latitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.longitude
      description: 'source longitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.mac
      description: 'source mac address.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.network
      description: 'source network.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.port
      description: 'source port.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.state
      description: 'source state.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.subnet
      description: 'source subnet.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.time_zone
      description: 'source time zone.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.zip
      description: 'source zip.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.device_id
      description: 'source inferred device ID.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.asset
      description: 'source inferred asset.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.managed
      description: 'source inferred managed.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.inferred.category
      description: 'source inferred category.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.control
      description: 'source inferred control.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.host_name
      description: 'source inferred host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.os
      description: 'source inferred OS.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.os_version
      description: 'source inferred OS version.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.ownership
      description: 'source inferred ownership.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.total_risk
      description: 'source inferred total risk score.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.inferred.type
      description: 'source inferred type.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.username
      description: 'source inferred username.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.managed_info.host_name
      description: 'source inferred managed host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.city
      description: 'destination city.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.continent
      description: 'destination continent.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.country
      description: 'destination country.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.ip
      description: 'destination ip.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.latitude
      description: 'destination latitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.longitude
      description: 'destination longitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.mac
      description: 'destination mac address.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.network
      description: 'destination network.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.port
      description: 'destination port.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.state
      description: 'destination state.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.subnet
      description: 'destination subnet.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.time_zone
      description: 'destination time zone.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.zip
      description: 'destination zip.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.device_id
      description: 'destination inferred device ID.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.asset
      description: 'destination inferred asset.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.managed
      description: 'destination inferred managed.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.inferred.category
      description: 'destination inferred category.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.control
      description: 'destination inferred control.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.host_name
      description: 'destination inferred host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.os
      description: 'destination inferred OS.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.os_version
      description: 'destination inferred OS version.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.ownership
      description: 'destination inferred ownership.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.total_risk
      description: 'destination inferred total risk score.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.inferred.type
      description: 'destination inferred type.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.username
      description: 'destination inferred username.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.managed_info.host_name
      description: 'destination inferred managed info hostname.'
      type: String
    - contextPath: WootCloud.PacketAlert.payload
      description: 'payload.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.hostname
      description: 'http hostname.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_method
      description: 'http methon.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_user_agent
      description: 'http user agent.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.length
      description: 'http length.'
      type: Number
    - contextPath: WootCloud.PacketAlert.http.protocol
      description: 'http protocol.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.redirect
      description: 'http redirect.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_refer
      description: 'http referal.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.status
      description: 'http status code.'
      type: Number
    - contextPath: WootCloud.PacketAlert.http.url
      description: 'http url.'
      type: String
    - contextPath: WootCloud.PacketAlert.type
      description: 'http type.'
      type: String
    - contextPath: WootCloud.PacketAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.PacketAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.PacketAlert.title
      description: 'title.'
      type: String
    - contextPath: WootCloud.PacketAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.PacketAlert.references
      description: 'references.'
      type: String

  - name: wootcloud-get-bt-alerts
    description: list bluetooth alerts generated in requested time span
    arguments:
    - name: date_range
      description: Examples are (2 hours, 4 minutes, 6 month, 1 day, etc.)
      required: true
    - name: severity
      description: severity with values of 'notice', 'warning', 'critical'.
    - name: skip
      description: 'Integer value for pagination. Default value is 0.'
      defaultValue: 0
    - name: limit
      description: 'Integer value for pagination. Default value: 10. Max Value: 500.'
      defaultValue: 10
    - name: site_id
      description: Array of site ids. Only entered if you want results for a particular site(s) (building, city, region).
    outputs:
    - contextPath: WootCloud.BluetoothAlert.id
      description: 'ID.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.timestamp
      description: 'timestamp.'
      type: Date
    - contextPath: WootCloud.BluetoothAlert.severity
      description: 'severity.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.address
      description: 'address.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.device_id
      description: 'inferred device ID.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.asset
      description: 'inferred asset.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.managed
      description: 'inferred managed.'
      type: Number
    - contextPath: WootCloud.BluetoothAlert.inferred.category
      description: 'inferred category.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.control
      description: 'inferred control.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.host_name
      description: 'inferred host name.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.os
      description: 'inferred OS.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.os_version
      description: 'inferred OS version.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.ownership
      description: 'inferred ownership.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.total_risk
      description: 'inferred total risk score.'
      type: Number
    - contextPath: WootCloud.BluetoothAlert.inferred.type
      description: 'inferred type.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.username
      description: 'inferred username.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.managed_info.host_name
      description: 'inferred managed info host name.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.type
      description: 'type.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.title
      description: 'title.'
      type: String

  - name: wootcloud-get-anomaly-alerts
    description: list anomaly alerts generated in requested time span
    arguments:
    - name: date_range
      description: Examples are (2 hours, 4 minutes, 6 month, 1 day, etc.)
      required: true
    - name: severity
      description: severity with values of 'info, ''notice', 'warning', 'critical'.
    - name: skip
      description: 'integer value for pagination. Default value: 0.'
      defaultValue: 0
    - name: limit
      description: 'Integer value for pagination. Default value: 10. Max Value: 500.'
      defaultValue: 10
    - name: site_id
      description: Array of site ids. Only entered if you want results for a particular site(s) (building, city, region).
    outputs:
    - contextPath: WootCloud.AnomalyAlert.id
      description: 'ID.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.timestamp
      description: 'timestamp.'
      type: Date
    - contextPath: WootCloud.AnomalyAlert.anomaly_type
      description: 'anomaly type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.severity
      description: 'severity.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.count
      description: 'count.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.average
      description: 'average.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.minimum
      description: 'minimum.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.maximum
      description: 'maximum.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.standard_deviation
      description: 'standard deviation.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.anomaly_score
      description: 'anomaly score.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.observed_value
      description: 'observed value.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.deviation_from_norm
      description: 'deviation from the norm.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.units
      description: 'units.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.address
      description: 'address.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.type
      description: 'type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.title
      description: 'title.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.device_id
      description: 'device details device ID.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.asset
      description: 'device details asset.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.managed
      description: 'device details managed.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.device_details.category
      description: 'device details category.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.control
      description: 'device details control.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.host_name
      description: 'device details host name.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.os
      description: 'device details OS.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.os_version
      description: 'device details OS version.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.ownership
      description: 'device details ownership.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.total_risk
      description: 'device details total risk score.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.device_details.type
      description: 'device details type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.username
      description: 'device details username.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.managed_info.host_name
      description: 'device details managed info host name.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.connections.ip
      description: 'connections ip.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.connections.port
      description: 'connections port.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.connections.connection_count
      description: 'connections connection count.'
      type: Number

  - name: wootcloud-fetch-packet-alert
    description: retrieve single packet alert given packet id
    arguments:
    - name: alert_id
      description: the ID of the packet alert.
      default: true
      required: true
    outputs:
    - contextPath: WootCloud.PacketAlert.id
      description: 'ID of alert.'
      type: String
    - contextPath: WootCloud.PacketAlert.address
      description: 'Mac Address of device.'
      type: String
    - contextPath: WootCloud.PacketAlert.timestamp
      description: 'Alert timestamp.'
      type: Date
    - contextPath: WootCloud.PacketAlert.severity
      description: 'Severity level.'
      type: String
    - contextPath: WootCloud.PacketAlert.category
      description: 'Alert Category.'
      type: String
    - contextPath: WootCloud.PacketAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.city
      description: 'source city.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.continent
      description: 'source continent.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.country
      description: 'source country.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.ip
      description: 'source ip.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.latitude
      description: 'source latitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.longitude
      description: 'source longitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.mac
      description: 'source mac address.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.network
      description: 'source network.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.port
      description: 'source port.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.state
      description: 'source state.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.subnet
      description: 'source subnet.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.time_zone
      description: 'source time zone.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.zip
      description: 'source zip.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.device_id
      description: 'source inferred device ID.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.asset
      description: 'source inferred asset.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.managed
      description: 'source inferred managed.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.inferred.category
      description: 'source inferred category.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.control
      description: 'source inferred control.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.host_name
      description: 'source inferred host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.os
      description: 'source inferred OS.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.os_version
      description: 'source inferred OS version.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.ownership
      description: 'source inferred ownership.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.total_risk
      description: 'source inferred total risk score.'
      type: Number
    - contextPath: WootCloud.PacketAlert.source.inferred.type
      description: 'source inferred type.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.username
      description: 'source inferred username.'
      type: String
    - contextPath: WootCloud.PacketAlert.source.inferred.managed_info.host_name
      description: 'source inferred managed host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.city
      description: 'destination city.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.continent
      description: 'destination continent.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.country
      description: 'destination country.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.ip
      description: 'destination ip.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.latitude
      description: 'destination latitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.longitude
      description: 'destination longitude.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.mac
      description: 'destination mac address.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.network
      description: 'destination network.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.port
      description: 'destination port.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.state
      description: 'destination state.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.subnet
      description: 'destination subnet.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.time_zone
      description: 'destination time zone.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.zip
      description: 'destination zip.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.device_id
      description: 'destination inferred device ID.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.asset
      description: 'destination inferred asset.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.managed
      description: 'destination inferred managed.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.inferred.category
      description: 'destination inferred category.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.control
      description: 'destination inferred control.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.host_name
      description: 'destination inferred host name.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.os
      description: 'destination inferred OS.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.os_version
      description: 'destination inferred OS version.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.ownership
      description: 'destination inferred ownership.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.total_risk
      description: 'destination inferred total risk score.'
      type: Number
    - contextPath: WootCloud.PacketAlert.destination.inferred.type
      description: 'destination inferred type.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.username
      description: 'destination inferred username.'
      type: String
    - contextPath: WootCloud.PacketAlert.destination.inferred.managed_info.host_name
      description: 'destination inferred managed info hostname.'
      type: String
    - contextPath: WootCloud.PacketAlert.payload
      description: 'payload.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.hostname
      description: 'http hostname.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_method
      description: 'http methon.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_user_agent
      description: 'http user agent.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.length
      description: 'http length.'
      type: Number
    - contextPath: WootCloud.PacketAlert.http.protocol
      description: 'http protocol.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.redirect
      description: 'http redirect.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.http_refer
      description: 'http referal.'
      type: String
    - contextPath: WootCloud.PacketAlert.http.status
      description: 'http status code.'
      type: Number
    - contextPath: WootCloud.PacketAlert.http.url
      description: 'http url.'
      type: String
    - contextPath: WootCloud.PacketAlert.type
      description: 'http type.'
      type: String
    - contextPath: WootCloud.PacketAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.PacketAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.PacketAlert.title
      description: 'title.'
      type: String
    - contextPath: WootCloud.PacketAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.PacketAlert.references
      description: 'references.'
      type: String
  - name: wootcloud-fetch-bluetooth-alert
    description: retrieve single bluetooth alert given packet id
    arguments:
    - name: alert_id
      description: the ID of the bluetooth alert.
      default: true
      required: true
    outputs:
    - contextPath: WootCloud.BluetoothAlert.id
      description: 'ID.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.timestamp
      description: 'timestamp.'
      type: Date
    - contextPath: WootCloud.BluetoothAlert.severity
      description: 'severity.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.address
      description: 'address.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.device_id
      description: 'inferred device ID.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.asset
      description: 'inferred asset.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.managed
      description: 'inferred managed.'
      type: Number
    - contextPath: WootCloud.BluetoothAlert.inferred.category
      description: 'inferred category.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.control
      description: 'inferred control.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.host_name
      description: 'inferred host name.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.os
      description: 'inferred OS.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.os_version
      description: 'inferred OS version.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.ownership
      description: 'inferred ownership.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.total_risk
      description: 'inferred total risk score.'
      type: Number
    - contextPath: WootCloud.BluetoothAlert.inferred.type
      description: 'inferred type.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.username
      description: 'inferred username.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.inferred.managed_info.host_name
      description: 'inferred managed info host name.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.type
      description: 'type.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.BluetoothAlert.title
      description: 'title.'
      type: String
  - name: wootcloud-fetch-anomaly-alert
    description: retrieve single anomaly alert given packet id
    arguments:
    - name: alert_id
      description: the ID of the anomaly alert.
      default: true
      required: true
    outputs:
    - contextPath: WootCloud.AnomalyAlert.id
      description: 'ID.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.timestamp
      description: 'timestamp.'
      type: Date
    - contextPath: WootCloud.AnomalyAlert.anomaly_type
      description: 'anomaly type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.signature
      description: 'signature.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.description
      description: 'description.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.severity
      description: 'severity.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.count
      description: 'count.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.average
      description: 'average.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.minimum
      description: 'minimum.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.maximum
      description: 'maximum.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.standard_deviation
      description: 'standard deviation.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.anomaly_score
      description: 'anomaly score.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.observed_value
      description: 'observed value.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.deviation_from_norm
      description: 'deviation from the norm.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.units
      description: 'units.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.address
      description: 'address.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.type
      description: 'type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.group
      description: 'group.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.subtype
      description: 'subtype.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.title
      description: 'title.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.device_id
      description: 'device details device ID.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.asset
      description: 'device details asset.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.managed
      description: 'device details managed.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.device_details.category
      description: 'device details category.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.control
      description: 'device details control.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.host_name
      description: 'device details host name.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.os
      description: 'device details OS.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.os_version
      description: 'device details OS version.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.ownership
      description: 'device details ownership.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.total_risk
      description: 'device details total risk score.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.device_details.type
      description: 'device details type.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.username
      description: 'device details username.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.device_details.managed_info.host_name
      description: 'device details managed info host name.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.connections.ip
      description: 'connections ip.'
      type: String
    - contextPath: WootCloud.AnomalyAlert.connections.port
      description: 'connections port.'
      type: Number
    - contextPath: WootCloud.AnomalyAlert.connections.connection_count
      description: 'connections connection count.'
      type: Number
  isfetch: true
  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10116658
tests:
- No tests
fromversion: 5.0.0