Skip to main content

Create Intel Intelligence

Create Intel intelligence with additional details.

External Documentation

To learn more, visit the Cyware CTIX documentation.

Basic Parameters

ParameterDescription
CollectionThe name of the collection of the intelligence. If the collection doesn't exist, it is automatically created.
SourceThe name of the source of the intelligence. If the source doesn't exist, it is automatically created.
TitleThe title of the created intelligence.

Advanced Parameters

ParameterDescription
ConfidenceThe confidence of the intelligence.
SDOs & IOCsThe SDOs and IOCs associated with the intelligence. For more information see Cyware documentation.
For Example:
<br/>{<br/> "all_iocs": {<br/> "ipv4": [<br/> {<br/> "value": "1.2.34.21",<br/> "description": "sample description",<br/> "is_false_positive": true,<br/> "notes": [<br/> "This is a sample Note attached to this indicator!",<br/> "Sample Note 2"<br/> ],<br/> "custom_attributes": {<br/> "x_custom_attribute1": "sample value 1",<br/> "x_custom_attribute2": "sample value 2"<br/> }<br/> }]<br/> },<br/> "vulnerabilities": [<br/> {<br/> "value": "vul1",<br/> "custom_attributes": {<br/> "x_custom_attribute1": "sample value 1",<br/> "x_custom_attribute2": "sample value 2"<br/> }<br/> }]<br/> }<br/>}<br/>
TLPThe Traffic Light Protocol(TLP) of the created intelligence.
TagsA comma-separated array of the tags associated with the intelligence.

Example Output

{
"details": "Intel creation is in progress."
}

Workflow Library Example

Create Intel Intelligence with Cyware Ctix and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop