Cyware Orchestrate

Bulk Lookup Indicators 

This action retrieves indicators in bulk.

Generic Action 

This is a generic action to perform any additional use case on Analyst1.

Get Rules 

This action retrieves the rules.

Get Sensors 

This action retrieves the sensors.

Lookup Indicator 

This action retrieves the details of an indicator.

Get Indicators by Rule 

This action retrieves a list of indicators for a rule.

Get Indicators by Sensor 

This action retrieves a list of indicators for a sensor.

Publish Evidence 

This action publishes evidence.

Get Difference 

This action retrieves the changes between the last known version and the new version of a sensor.

Sensor Config Download 

This action downloads the sensor configuration file.

Upload Statistics 

This action ingests hit statistics file.

Get Rules by Sensor 

This action retrieves a list of rules for a sensor.

Get Sensor tasking rules and indicators 

This action retrieves both a list of sensor tasking rules and indicators for any specific sensor.

Get Current Version of Rule

This action retrieves the current version for a specific rule. 

Get Current Version of Sensor

This action retrieves a current version for a specific sensor.

Batch Check Indicators

This action retrieves details for a batch of indicators.

Base URL

Enter the base URL to connect to Analyst1.

Text

Required

Username

Enter the username to authenticate the client.

Text

Required

Password

Enter the password to authenticate the client.

Password

Required

Verify

Choose to verify the SSL certificates.

Example:

true

Boolean

Optional

Default value:

false

Allowed values:

Timeout

Enter the timeout value in seconds. This is the number of seconds that requests will wait to establish a connection with Analyst1.

Integer

Optional

Allowed values: 

15 -120 seconds

Default value:

15 seconds

Query Params

Enter query parameters to retrieve indicators.

Example:

$JSON{'type':'ip','value':'18x.61.1xx.154', 'value':'17x.67.1xx.157}

Key Value

Optional

HTTP method

Enter the HTTP endpoint method.

Example:

Text

Required

Endpoint

Enter the complete endpoint to initiate the call.

Example:

"/api/1_0/indicator/bulkMatch"

Text

Required

Payload JSON

Enter the payload in JSON format to perform a generic action.

Any

Optional

Payload Data

Enter the payload data.

Any

Optional

Query Params

Enter the query parameters to filter the result.

Key Value

Optional

Query Params

Enter the query parameters to filter the response. 

Example:

{'type':'PALO_ALTO'}

Key Value

Optional

Query Params 

Enter query parameters to retrieve indicator details.

Example:

$JSON{'type':'domain','value':'sampledomain.com'}

Key Value

Optional

Offset 

Enter the offset.

Integer

Optional

Default value: 

0

 Page Size

 Enter the page size.

Integer 

 Optional

Default value: 

1010 

Rule ID 

Enter the rule ID.

Text

Required

Offset

Enter the offset.

Integer

Optional

Default: 

0

Page Size

Enter the page size.

Integer

Optional

Default: 

1010

Sensor ID 

Enter the sensor ID.

Text

Required

Offset 

Enter the offset.

Integer

Optional

Default value: 

0

Page Size 

Enter the page size.

Integer

Optional

Default: 

1010

File Path

Enter the file path to access evidence.

Text

Required

TLP

Enter the TLP status. 

Example:

Text

Required

Evidence File Classification 

Enter the classification of the evidence file. 

Example: 

U

Text

Required

Extra Parameters

Enter the extra parameters in key-value pairs.

Key Value

Optional

Allowed keys:

Sensor ID

Enter the sensor ID.

Text

Required

Last Version

Enter the last known version.

Text

Required

Sensor ID

Enter the sensor ID.

Text

Required

File Path

Enter the file path to upload hit statistics file.

Text

Required

Sensor ID 

Enter the sensor ID 

Text

Required

Offset 

Enter the offset.

Integer

Optional

Default: 

0

Page Size 

Enter the page size.

Integer

Optional

Default: 

1010

Rule ID

Enter the rule ID.

Text

Required

Sensor ID

Enter the sensor ID. 

Text

Required

Values

Enter the values. 

Example:

1.2.3.4, abc.com, google.com

Text

Optional

Files

Enter the file path.

Text

Optional