Create Intel Intelligence
Create Intel intelligence with additional details.
External Documentation
To learn more, visit the Cyware CTIX documentation.
Basic Parameters
Parameter | Description |
---|---|
Collection | The name of the collection of the intelligence. If the collection doesn't exist, it is automatically created. |
Source | The name of the source of the intelligence. If the source doesn't exist, it is automatically created. |
Title | The title of the created intelligence. |
Advanced Parameters
Parameter | Description |
---|---|
Confidence | The confidence of the intelligence. |
SDOs & IOCs | The SDOs and IOCs associated with the intelligence. For more information see Cyware documentation. For Example: <br/>{<br/> "all_iocs": {<br/> "ipv4": [<br/> {<br/> "value": "1.2.34.21",<br/> "description": "sample description",<br/> "is_false_positive": true,<br/> "notes": [<br/> "This is a sample Note attached to this indicator!",<br/> "Sample Note 2"<br/> ],<br/> "custom_attributes": {<br/> "x_custom_attribute1": "sample value 1",<br/> "x_custom_attribute2": "sample value 2"<br/> }<br/> }]<br/> },<br/> "vulnerabilities": [<br/> {<br/> "value": "vul1",<br/> "custom_attributes": {<br/> "x_custom_attribute1": "sample value 1",<br/> "x_custom_attribute2": "sample value 2"<br/> }<br/> }]<br/> }<br/>}<br/> |
TLP | The Traffic Light Protocol(TLP) of the created intelligence. |
Tags | A comma-separated array of the tags associated with the intelligence. |
Example Output
{
"details": "Intel creation is in progress."
}
Workflow Library Example
Create Intel Intelligence with Cyware Ctix and Send Results Via Email
Preview this Workflow on desktop