RiskIQ

RiskIQ_PushArtifactToProject

Author: RiskIQ
License: AGPL-V3
Version: 1.0
Supported data types:
- thehive:case_artifact
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description

Push a case to a RiskIQ Illuminate project.

Configuration

username	API username of the RiskIQ Illuminate or PassiveTotal account (usually an email address)
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

api_key	API key of the RiskIQ Illuminate or PassiveTotal account
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

project_visibility	Visiblity for new RiskIQ Illuminate projects (analyst, team, or public).
Default value if not configured	analyst
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	True

project_prefix	Prefix to add when auto-generating project names from case names.
Default value if not configured	Hive:
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	False

thehive_artifact_tag	Tag to apply to artifact in TheHive when is has been pushed to a RiskIQ Illuminate Project (leave blank to skip tagging).
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	False

riq_artifact_tag	Tag to apply to artifact in RiskIQ Illuminate when is has been pushed to an Illuminate Project (leave blank to skip tagging).
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	False