Skip to main content

Cyware Orchestrate

Blueliv V2

App Vendor: Blueliv

App Category: Data Enrichment & Threat Intelligence

Connector Version: 1.0.0

API Version: v2

Notice

This is a beta-app and the documentation is in progress.

About App

Blueliv V2 app integrates with Blueliv V2 enterprise application, which adds cyber threat intelligence to your existing data to help aggregate and correlate a comprehensive range of cyber threats including compromised URLs, domains, IPs, and more.

Blueliv V2 app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

Fetch Crime Server URLs

This action retrieves a list of crime-server URLs.

Fetch Data Leakage Alert

This action retrieves a list of data leakage alerts.

Fetch Data Leakage Resources

This action retrieves a filtered list of data leakage resources.

Fetch Domain Protection Alerts

This action retrieves a list of domain protection alerts.

Fetch Domain Protection Resources

This action retrieves a list of domain protection resources.

Fetch Hacktivism Alerts

This action retrieves a list of hacktivism alerts.

Fetch Hacktivism Resources

This action retrieves a list of hacktivism resources.

Fetch IPs

This action retrieves a list of IPs.

Fetch Malware Alerts

This action retrieves a list of malware alerts.

Fetch Malware Resources

This action retrieves a list of malware resources.

Fetch Mobile Alerts

This action retrieves a list of mobile alerts.

Fetch Mobile Resources

This action retrieves a list of mobile resources.

Fetch Social Media Alerts

This action retrieves a list of social media alerts.

Fetch Social Media Resources

This action retrieves a list of social media resources.

Get Modules

This action retrieves a list of modules for the organization.

Configuration Parameters

The following configuration parameters are required for the Blueliv V2 app to communicate with the Blueliv V2 enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the base URL to access Blueliv V2 app.

Example:

"https://instance_name.blueliv.com"

Text

Required

Organization ID

Enter the organization ID. The organization ID can be found on the URL of your instance, once you have logged in through the UI.

Example:

"https://example.blueliv.com/dashboard/organizations/organization_id/summary"

Text

Required

Username

Enter the username to connect to Blueliv V2 app.

Text

Required

Password

Enter the password to authenticate with Blueliv V2 app.

Password

Required

Auth Code

Enter the two-factor authentication code if it is configured.

Text

Optional

Action: Fetch Crime Server URLs

This action retrieves a list of crime-server URLs.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Query Param

Enter the query parameters to narrow down the result to fetch crime server URLs.

Example:

"sort":"asc"

Key Value

Optional

Allowed keys:

  • sort

  • dork

  • page [limit]

  • page [offset]

Action: Fetch Data Leakage Alert

This action retrieves a list of data leakage alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the data leakage alert list.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"st"

This sorts the retrieved values by status.

Text

Optional

Allowed values:

  • id

  • ch (fired at)

  • fn (filter name)

  • st (status)

Sort

Enter true to sort the results.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Data Leakage Resources

This action retrieves a filtered list of data leakage resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to fetch the data leakage resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Integer

Optional

Default value:

1

Max Row

Enter the number of alerts to return.

Example:

100

Integer

Optional

Default value:

100

Read

Enter the read status.

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread

Default value:

0

Starred

Enter true to show only starred resources.

Example:

True

Boolean

Optional

Default value:

false

Order

Choose to order by the selected criteria.

Example:

"title"

This sorts the retrieved values by title.

Text

Optional

Allowed values:

  • id

  • title

  • changed_at

  • user_rating

  • analysis_calc_result

  • countries_id

  • url

Default value:

changed_at

Sort

Enter true to sort the list.

Example:

true

Boolean

Optional

Default value:

false

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed keys:

  • labels

  • incidents

  • terms

Action: Fetch Domain Protection Alerts

This action retrieves a list of pageable domain protection alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to fetch the domain protection alerts.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"module_name"

This sorts the retrieved values by module name.

Text

Optional

Allowed values:

  • id

  • firedat("fired_at")

  • filtername("filter_name")

  • modulename("module_name")

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Domain Protection Resources

This action retrieves a pageable list of domain protection resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to fetch the domain protection resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Integer

Optional

Default value:

1

Max Row

Enter the number of resources to return.

Example:

10

Integer

Optional

Default value:

100

Read

Enter the read status.

Example:

0

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread.

Default value:

0

Starred

Enter true to show only starred resources.

Example:

true

Boolean

Optional

Default value:false

Order

Choose to order by the selected criteria.

Example:

"title"

This sorts the retrieved values by title.

Text

Optional

Allowed values:

  • id

  • title

  • changed_at

  • user_rating

  • analysis_calc_result

  • countries_id

  • url

Default value:

changed_at

Sort

Enter true to sort.

Default value:

true

Boolean

Optional

Default value:

false

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed values:

  • labels

  • incidents

  • terms

Action: Fetch Hacktivism Alerts

This action retrieves a list of hacktivism alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the hacktivism alerts.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"st"

This sorts the retrieved values by status.

Text

Optional

Allowed values:

  • id

  • ch (fired at)

  • fn (filter name)

  • st (status)

Default value:

ch(Fired at)

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Hacktivism Resources

This action is used to obtain a list of hacktivism resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the hacktivism resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Integer

Optional

Default value:

1

Max Row

Enter the number of alerts to return.

Integer

Optional

Default value:

100

Read

Enter the read status.

Example:

0

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread.

Default value:

0

Starred

Enter true to show only starred resources.

Example:

true

Boolean

Optional

Order

Choose to order by the selected criteria.

Example:

"title"

This sorts the retrieved values by title.

Text

Optional

Allowed values:

  • id

  • title

  • changed_at

  • user_rating

  • analysis_calc_result

  • countries_id

  • url

Default value:

changed_at

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed values:

  • labels

  • incidents

  • terms

Action: Fetch IPs

This action retrieves a list of IPs.

Action Input Parameters

This action does not require any input parameters.

Action: Fetch Malware Alerts

This action retrieves a list of malware alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the malware alerts.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"id"

This sorts the retrieved values by ID.

Text

Optional

Allowed values:

  • id

  • modulename (module_name)

  • firedat (fired_at)

  • filtername (filter_name)

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Malware Resources

This action retrieves a list of malware resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the malware resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Integer

Optional

Default value:

1

Max Row

Enter the number of alerts to return.

Integer

Optional

Default value:

100

Read

Enter the read status.

Example:

0

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread.

Default value:

0

Starred

Enter true to show only starred resources.

Boolean

Optional

Default value:

false

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed values:

  • labels

  • incidents

  • terms

Action: Fetch Mobile Alerts

This action retrieves a list of mobile alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the mobile alerts.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"id"

This sorts the retrieved values by ID.

Text

Optional

Allowed values:

  • id(id)

  • modulename(module_name)

  • filtername(filter_name)

  • firedat(fired_at)

Default value:

ch

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Mobile Resources

This action retrieves a list of mobile resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the mobile resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Integer

Optional

Default value:

1

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

100

Read

Enter the read status.

Example:

0

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread.

Default value:

0

Starred

Enter true to show only starred resources.

Example:

true

Boolean

Optional

Default value:

false

Order

Choose to order by the selected criteria.

Example:

"title"

This sorts the retrieved values by title.

Text

Optional

Allowed values:

  • id

  • title

  • changed_at

  • user_rating

  • analysis_calc_result

  • countries_id

  • url

Default value:

changed_at

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed values:

  • labels

  • incidents

  • terms

Action: Fetch Social Media Alerts

This action retrieves a list of social media alerts.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve a list of social media alerts.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Example:

1

Text

Optional

Default value:

1

Order

Choose to order by the selected criteria.

Example:

"id"

This sorts the retrieved values by ID.

Text

Optional

Allowed values:

  • id (id)

  • modulename (module_name)

  • filtername (filter_name)

  • firedat (fired_at)

Default value:

ch

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Max Row

Enter the number of alerts to return.

Example:

10

Integer

Optional

Default value:

10

Action: Fetch Social Media Resources

This action retrieves a list of social media resources.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Module ID

Enter the module ID to retrieve the social media resources.

Example:

1

Text

Required

You can retrieve the Module ID using the action Get Modules.

Page

Enter the page number.

Integer

Optional

Default value:

1

Max Row

Enter the number of alerts to return.

Integer

Optional

Default value:

100

Read

Enter the read status.

Integer

Optional

Allowed values:

  • 0 - read and unread

  • 1 - only read

  • 2 - only unread.

Default value:

0

Starred

Enter true to show only starred resources.

Example:

true

Boolean

Optional

Default value:

false

Order

Choose to order by the selected criteria.

Example:

"title"

This sorts the retrieved values by title.

Text

Optional

Allowed values:

  • id

  • title

  • changed_at

  • user_rating

  • analysis_calc_result

  • countries_id

  • url

Default value:

changed_at

Sort

Enter true to sort.

Example:

true

Boolean

Optional

Default value:

false

Extra Query

Enter the additional queries.

Example:

"labels":"labelname"

Key Value

Optional

Allowed values:

  • labels

  • incidents

  • terms

Action: Get Modules

This action retrieves a list of the modules for the organization.

Action Input Parameters

This action does not require any input parameters.