Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Pack: CTM360 #37743

Merged
Show file tree
Hide file tree
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion Packs/CTM360-CyberBlindspot/.pack-ignore
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
[file:incidentfields-Course_Of_Action.json]
ignore=IF115
[file:incidentfields-Potential_Impact.json]
ignore=IF115
[file:incidentfields-Technologies.json]
ignore=IF115
[file:incidentfields-Asset_Type.json]
ignore=IF115
[file:incidentfields-Potential_Attack.json]
ignore=IF115

[known_words]
D
Expand All @@ -10,4 +18,5 @@ URLs
pytest
plugin
mappers
CyberBlindspot
CyberBlindspot
HackerView
9 changes: 8 additions & 1 deletion Packs/CTM360-CyberBlindspot/.secrets-ignore
Original file line number Diff line number Diff line change
@@ -1,2 +1,9 @@
[email protected]
https://cbs.ctm360.com
https://cbs.ctm360.com
https://hackerview.ctm360.com
https://platform.ctm360.com
154.134.143.229
229.13.147.132
173.53.166.40
10.161.216.126
242.230.133.23
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
{
"description": "Maps incoming CTM360 HackerView incidents.",
"feed": false,
"id": "CTM360-HackerView - Incoming Mapper",
"mapping": {
"HackerView Incident": {
"dontMapEventToLabels": false,
"internalMapping": {
"Affected Hosts": {
"simple": "CustomFields.host"
},
"CTM360 HackerView Asset Type": {
"simple": "CustomFields.asset_type"
},
"CTM360 HackerView Potential Attack Types": {
"simple": "CustomFields.potential_attack_type"
},
"CTM360 HackerView Potential Impact": {
"simple": "CustomFields.potential_impact"
},
"CTM360 HackerView Technologies": {
"simple": "CustomFields.technologies"
},
"CVE ID": {
"simple": "CustomFields.cve_id"
},
"Categories": {
"simple": "CustomFields.issue_category"
},
"External Confidence": {
"simple": "CustomFields.confidence"
},
"External Link": {
"simple": "CustomFields.hackerview_link"
},
"External Status": {
"simple": "external_status"
},
"dbotMirrorDirection": {
"simple": "xsoar_mirroring.mirror_direction"
},
"dbotMirrorId": {
"simple": "xsoar_mirroring.mirror_id"
},
"dbotMirrorInstance": {
"simple": "xsoar_mirroring.mirror_instance"
},
"name": {
"complex": {
"filters": [],
"root": "name",
"transformers": []
}
},
"occurred": {
"complex": {
"filters": [],
"root": "occurred",
"transformers": []
}
},
"severity": {
"complex": {
"filters": [],
"root": "severity",
"transformers": []
}
}
}
}
},
"name": "CTM360-HackerView - Incoming Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.10.0"
}
Loading
Loading