Skip to main content

Cyware Orchestrate

Mandiant Advantage Attack Surface Management

App Vendor: Mandiant Advantage Attack Surface Management

App Category: Analytics & SIEM

Connector Version: 1.0.0

API Version: v1

About App

Mandiant Advantage Attack Surface Management discovers and analyzes internet assets across distributed and shared environments. Continually monitor discovered assets for exposures and enable intelligence and red teams to operationalize and inform risk management.

The Mandiant Advantage Attack Surface Management app is configured with Orchestrate to perform the following actions:

Action Name

Description

Generic Action 

This is a generic action used to make requests to any endpoint.

Get Entity Details 

This action retrieves the details of a specific entity.

Get Issue Details 

This action retrieves the details of a specific issue.

List All Collections 

This action retrieves all the collections.

List All Projects 

This action lists all the projects.

Configuration Parameters

The following configuration parameters are required for the Mandiant Advantage Attack Surface Management app to communicate with the Mandiant Advantage Attack Surface Management enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Access Key 

Enter the access key to connect with Mandiant Attack Surface Management.

Text

Required

Secret Key 

Enter the secret key to authenticate with Mandiant Attack Surface Management.

Password

Required

Verify 

Choose your preference to verify SSL or TLS while making requests. It is recommended to set this option to yes. Passing no may result in incorrectly establishing the connection.

Boolean

Optional

Default:

false

Allowed values:

  • true

  • false

Timeout 

Enter the timeout value in seconds. This is the number of seconds that requests will wait to establish a connection with Mandiant Advantage Attack Surface Management.

Integer

Optional

Default:

15 

Allowed values:

15-120 

Action: Generic Action

This is a generic action used to make requests to any endpoint.

Action Input Parameters 

Parameter

Description

Field Type

Required/Optional

Comments

Method 

Enter the HTTP method to make the request.

Text

Required

Allowed values:

  • GET 

  • PUT

  • POST

  • DELETE

Endpoint 

Enter the endpoint to make the request to. 

Example:

/api/vulnerabilities/{cve_id}/affected-projects

Text

Required

Query params 

Enter the query parameters to pass to the API.

Key Value

Optional

Payload 

Enter the payload to pass to the API.

Any

Optional

Extra fields 

Enter the extra fields to pass to the API.

Key Value

Optional

Action: Get Entity Details

This action retrieves the details of a specific entity.

Action Input Parameters 

Parameter

Description

Field Type

Required/Optional

Comments

Entity ID 

Enter the entity ID to get the details. 

Example: 

c871130e4d8655c5af8f4f371dc5280bbb7397b746ede30265dd895190a330bd

Text

Required

Project ID 

Enter the project ID to get the associated entity details. If not provided, it will return all the entity details. 

Example: 

60f3e3e3d3e3e3e3e3e3e3e3

Text

Optional

Action: Get Issue Details

This action retrieves the details of a specific issue.

Action Input Parameters 

Parameter

Description

Field Type

Required/Optional

Comments

Issue ID 

Enter the issue ID to get the details. 

Example: 

5e87af3780f84c71a01e40807db0419868cf69faba16ab44c03b1160204a3f57

Text

Required

Project ID 

Enter the project ID to get the associated issue details. If not provided, it will return all the entity details. 

Example: 

60f3e3e3d3e3e3e3e3e3e3e3

Text

Optional

Action: List All Collections

This action retrieves all the collections.

Action Input Parameters 

Parameter

Description

Field Type

Required/Optional

Comments

Project ID 

Enter the project ID to get the associated collections. If not provided, it will return all the collections. 

Example: 

60f3e3e3d3e3e3e3e3e3e3e3

Text

Optional

Action: List All Projects

This action lists all the projects.

Action Input Parameters 

No input parameters are required for this action.