Skip to content

RiskIQ#

RiskIQ_PushArtifactToProject#

Author: RiskIQ
License: AGPL-V3
Version: 1.0
Supported data types:
- thehive:case_artifact
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

Push a case to a RiskIQ Illuminate project.

Configuration#

username API username of the RiskIQ Illuminate or PassiveTotal account (usually an email address)
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
api_key API key of the RiskIQ Illuminate or PassiveTotal account
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
project_visibility Visiblity for new RiskIQ Illuminate projects (analyst, team, or public).
Default value if not configured analyst
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
project_prefix Prefix to add when auto-generating project names from case names.
Default value if not configured Hive:
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
thehive_artifact_tag Tag to apply to artifact in TheHive when is has been pushed to a RiskIQ Illuminate Project (leave blank to skip tagging).
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False
riq_artifact_tag Tag to apply to artifact in RiskIQ Illuminate when is has been pushed to an Illuminate Project (leave blank to skip tagging).
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required False

Last update: October 21, 2022 15:12:23