category: Deception & Breach Simulation
provider: Acalvio
commonfields:
  id: Acalvio ShadowPlex
  version: -1
configuration:
- defaultvalue: https://example.net
  display: Acalvio API Server URL (e.g. https://example.net)
  name: url
  required: true
  type: 0
- display: Acalvio API Key
  name: apikey
  required: true
  type: 4
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Acalvio ShadowPlex is a comprehensive Autonomous Deception Platform that offers Advanced Threat Detection, Investigation and Response capabilities.
display: Acalvio ShadowPlex
name: Acalvio ShadowPlex
script:
  commands:
  - arguments:
    - description: Hostname or IP Address of Endpoint.
      name: host
      required: true
    description: Check for a Deception Host
    name: acalvio-is-deception-host
    outputs:
    - contextPath: Acalvio.IsDeceptionHost.IsDeception
      description: Returns 'True' if Host is a Deception else 'False'.
      type: Boolean
    - contextPath: Acalvio.IsDeceptionHost.Host
      description: Host to be checked if Deception.
      type: String
    - contextPath: Acalvio.IsDeceptionHost.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Username of the Domain User.
      name: username
      required: true
    - description: AD Domain Name to which User belongs to.
      name: domain
    description: Check for a Deception User
    name: acalvio-is-deception-user
    outputs:
    - contextPath: Acalvio.IsDeceptionUser.IsDeception
      description: Returns 'True' if its a Deception User else 'False'.
      type: Boolean
    - contextPath: Acalvio.IsDeceptionUser.Username
      description: Username to be checked if Deception.
      type: String
    - contextPath: Acalvio.IsDeceptionUser.Domain
      description: Users Domain.
      type: String
    - contextPath: Acalvio.IsDeceptionUser.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Hostname or IP Address of Endpoint where file resides.
      name: endpoint
      required: true
    - description: Name of the file to be checked.
      name: filename
      required: true
    description: Check for a Deception File on the Endpoint
    name: acalvio-is-deception-file
    outputs:
    - contextPath: Acalvio.IsDeceptionFile.IsDeception
      description: Returns 'True' if File is a Deception else 'False'.
      type: Boolean
    - contextPath: Acalvio.IsDeceptionFile.Filename
      description: Filename to be checked if Deception.
      type: String
    - contextPath: Acalvio.IsDeceptionFile.Endpoint
      description: Hostname or IP Address of Endpoint where file resides.
      type: String
    - contextPath: Acalvio.IsDeceptionFile.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Hostname or IP Address of Deception Host.
      name: host
      required: true
    description: Mute a Deception Host
    name: acalvio-mute-deception-host
    outputs:
    - contextPath: Acalvio.MuteDeceptionHost.Host
      description: Deception Host to be Muted.
      type: String
    - contextPath: Acalvio.MuteDeceptionHost.IsMute
      description: Returns 'True' if Deception is Muted else 'False'.
      type: Boolean
    - contextPath: Acalvio.MuteDeceptionHost.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Hostname or IP Address of Deception Host.
      name: host
      required: true
    description: Unmute a Deception Host
    name: acalvio-unmute-deception-host
    outputs:
    - contextPath: Acalvio.UnmuteDeceptionHost.Host
      description: Deception Host to be Unmuted.
      type: String
    - contextPath: Acalvio.UnmuteDeceptionHost.IsUnmute
      description: Returns 'True' if Deception is Unmuted else 'False'.
      type: Boolean
    - contextPath: Acalvio.UnmuteDeceptionHost.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Hostname or IP Address of Endpoint.
      name: endpoint
      required: true
    description: Mute a Deception on Endpoint
    name: acalvio-mute-deception-on-endpoint
    outputs:
    - contextPath: Acalvio.MuteDeceptionEndpoint.Endpoint
      description: Endpoint on which Deception is to be Muted.
      type: String
    - contextPath: Acalvio.MuteDeceptionEndpoint.IsMute
      description: Returns 'True' if Deception is Muted else 'False'.
      type: Boolean
    - contextPath: Acalvio.MuteDeceptionEndpoint.DateTime
      description: Date including Time.
      type: String
  - arguments:
    - description: Hostname or IP Address of Endpoint.
      name: endpoint
      required: true
    description: Unmute a Deception on Endpoint
    name: acalvio-unmute-deception-on-endpoint
    outputs:
    - contextPath: Acalvio.UnmuteDeceptionEndpoint.Endpoint
      description: Endpoint on which Deception is to be Unmuted.
      type: String
    - contextPath: Acalvio.UnmuteDeceptionEndpoint.IsUnmute
      description: Returns 'True' if Deception is Unmuted else 'False'.
      type: Boolean
    - contextPath: Acalvio.UnmuteDeceptionEndpoint.DateTime
      description: Date including Time.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- no test
fromversion: 5.0.0