Skip to main content

Brinqa

App Vendor: Brinqa

App Category: Data Enrichment & Risk Intelligence

Connector Version: 1.0.0

API Version: 11.31.140

About App

The Brinqa app allows security teams to connect with Brinqa, providing unified visibility into risks across assets, vulnerabilities, and security issues, helping improve overall security posture.

The Brinqa app is configured with Cyware Orchestrate to perform the following actions:

Action Name

Description

Generic Action

This is a generic action used to make requests to any Brinqa endpoint.

Get Assets

This action retrieves assets from Brinqa. You can specify filters to return active or inactive assets, compliant or non-compliant, and other conditions as required.

Get Hosts

This action retrieves host records from Brinqa. You can specify filters to include active or inactive hosts, public or private hosts, and any additional criteria.

Get New Findings

This action retrieves findings from Brinqa based on the specified criteria.

Get Tickets

This action retrieves tickets from Brinqa. You can specify filters to return open or closed tickets, assigned or unassigned tickets, and apply other conditions as required.

Get Vulnerabilities

This action retrieves vulnerabilities from Brinqa. You can specify filters to return active or inactive, critical or non-critical vulnerabilities, and other conditions as required.

Configuration Parameters

The following configuration parameters are required for the Brinqa app to communicate with the Brinqa enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the base URL to access Brinqa.

Example:

https://<your-brinqa-platform-url>

Text

Required

API Token

Enter the API token for authentication. You must either provide an API token or enter both username and password.

Password

Optional

Verify

Choose to verify SSL/TLS certification.

Boolean

Optional

Allowed value:

true and false

By default, verification is enabled.

Timeout

Enter the timeout value in seconds. This is the number of seconds that requests will wait to establish a connection with the Brinqa app.

Integer

Optional

Allowed range:

15-120 seconds

Default value:

15 seconds

Username

Enter your Brinqa account username for authentication. You must either provide an API token or enter both username and password

Text

Optional

Password

Enter your Brinqa account password for authentication. You must either provide an API token or enter both username and password.

Password

Optional

MFA Code

Enter the multi-factor authentication (MFA) code to verify your identity. This is required when logging in with username and password, and MFA is enabled.

Text

Optional

Action: Generic Action

This is a generic action used to make requests to any Brinqa endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Limit

Enter the maximum number of records to return.

Integer

Optional

Default value:

10

Filter

Enter conditions to filter the results.

Example:

`status=active`

Text

Optional

Fields to Retrieve

Enter fields to include in the response.

Example:

$list[compliancestatus]

List

Optional

Default values:

id, categories, complianceFlags, status, lastUpdated, complianceStatus, flowState, displayName, firstSeen, aseRiskScore, dataIntegrationTitles, id, firstSeen, riskRating, macAddresses, statusCategory, displayName, openFindingCount, connectorNames, firstFound, riskRating, type, assigned, buid, dueDate, name, uid

Query Name

Enter any additional fields to include in the response.

Text

Optional

Allowed fields:

complianceStatus, displayName, firstSeen, and more.

Dataset Type

Select the Brinqa dataset type to query.

Text

Optional

Allowed values:

assets, fields, vulnerabilities, tickets, and hosts.

Default value:

assets

Action: Get Assets

This action retrieves assets from Brinqa. You can specify filters to return active or inactive assets, compliant or non-compliant, and other conditions as required.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Limit

Enter the maximum number of assets to return.

Integer

Optional

Default value:

10

Filter

Enter conditions to filter assets.

Example:

`status=active and compliancestatus=non_compliant` returns active assets that are non-compliant

Text

Optional

Fields to Retrieve

Enter specific fields to include in the response.

Example: $list[complianceStatus]

List

Optional

Default values:

id, status, lastUpdated, complianceStatus, displayName, and firstSeen.

Action: Get Hosts

This action retrieves host records from Brinqa. You can specify filters to include active or inactive hosts, public or private hosts, and any additional criteria.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter

Enter conditions to filter hosts.

Example:

"status=active and riskrating=critical returns active hosts with riskrating critical.

Text

Optional

Limit

Enter the number of records to return.

Integer

Optional

Default value:

10

Fields to retrieve

Enter fields to include in the response.

Example:

$list[id]

List

Optional

Default values:

baseriskscore, dataintegrationtitles, id, firstseen, riskrating, macaddresses, statuscategory, displayname, openfindingcount

Action: Get New Findings

This action retrieves findings from Brinqa based on the specified criteria.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Limit

Enter the number of records to return.

Integer

Optional

Default value:

10

Filter

Enter the condition to filter findings.

Example:

"ageindays < 30" to fetch findings discovered within the last 30 days

Text

Optional

Fields to Retrieve

Enter fields to include in the response.

Example: $list[id]

List

Optional

Default values:

connectorNames, firstFound, id, riskRating, statusCategory, type, and recommendation.

Action: Get Tickets

This action retrieves tickets from brinqa. you can specify filters to return open or closed tickets, assigned or unassigned tickets, and apply other conditions as required.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter

Enter conditions to filter tickets.

Example:

`status=open` returns tickets that are currently open.

Text

Optional

Limit

Enter the maximum number of tickets to return.

Integer

Optional

Default value:

10

Fields to Retrieve

Enter fields to include in the response.

Example:

$list[uid]

List

Optional

Default values:

assigned, buid, complianceStatus, riskRating, dueDate, name, uid.

Action: Get Vulnerabilities

This action retrieves vulnerabilities from Brinqa. You can specify filters to return active or inactive, critical or non-critical vulnerabilities, and other conditions as required.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter

Enter conditions to filter vulnerabilities.

Example:

`status=active and riskrating=critical` returns active vulnerabilities with a critical risk rating.

Text

Optional

Limit

Enter the maximum number of vulnerabilities to return.

Integer

Optional

Default value:

10

Fields to Retrieve

Enter fields to include in the response.

Example:

$list[description]

List

Optional

Default values:

riskScore, id, description, connectorNames, complianceStatus, ageInDays