Skip to content

Commit

Permalink
Refresh automation library documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
squioc authored Dec 5, 2023
1 parent b5350aa commit e0ff378
Show file tree
Hide file tree
Showing 3 changed files with 23 additions and 4 deletions.
19 changes: 18 additions & 1 deletion _shared_content/automate/library/sekoia-io.md
Original file line number Diff line number Diff line change
Expand Up @@ -149,13 +149,15 @@ Get all non-revoked objects from Sekoia.io Intelligence feed
| Name | Type | Description |
| --------- | ------- | --------------------------- |
| `feed_id` | `string` | ID of the Sekoia.io feed to get data from |
| `to_file` | `boolean` | Whether the event should be saved in a file or sent directly |


**Outputs**

| Name | Type | Description |
| --------- | ------- | --------------------------- |
| `stix_objects` | `object` | STIX objects returned by the feed |
| `stix_objects_path` | `string` | Filepath of the STIX objects fetched from the collection |


### Feed IOC Consumption
Expand All @@ -167,13 +169,15 @@ Get all valid IOCs from Sekoia.io Intelligence feed
| Name | Type | Description |
| --------- | ------- | --------------------------- |
| `feed_id` | `string` | ID of the Sekoia.io feed to get data from |
| `to_file` | `boolean` | Whether the event should be saved in a file or sent directly |


**Outputs**

| Name | Type | Description |
| --------- | ------- | --------------------------- |
| `stix_objects` | `object` | IOCs returned by the feed (STIX objects) |
| `stix_objects_path` | `string` | Filepath of the STIX objects fetched from the collection |


### Any Alert Update
Expand Down Expand Up @@ -483,6 +487,17 @@ Retrieve the definition of an alert
| `title` | `string` | |
| `target` | `string` | |

### Get context

Get reports from a specific term

**Arguments**

| Name | Type | Description |
| --------- | ------- | --------------------------- |
| `sort` | `string` | |
| `term` | `string` | |

### Get Event Field Common Values

Get the most common values of fields observed under a specific query
Expand All @@ -495,6 +510,7 @@ Get the most common values of fields observed under a specific query
| `earliest_time` | `string` | The earliest time of the time range of the search |
| `latest_time` | `string` | The latest time of the time range of the search |
| `fields` | `string` | Fields to compute the most common values (use a coma between fields) |
| `limit` | `number` | Maximum number of events to retrieve |


**Outputs**
Expand All @@ -514,6 +530,7 @@ Query events
| `query` | `string` | Event search query |
| `earliest_time` | `string` | The earliest time of the time range of the search |
| `latest_time` | `string` | The latest time of the time range of the search |
| `limit` | `number` | Maximum number of events to retrieve |


**Outputs**
Expand Down Expand Up @@ -852,4 +869,4 @@ Triggers an action on an alert to update its status

## Extra

Module **`Sekoia.io` v2.43**
Module **`Sekoia.io` v2.54.0**
4 changes: 2 additions & 2 deletions docs/assets/playbooks/library/sekoia-io.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
4 changes: 3 additions & 1 deletion mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -296,6 +296,7 @@ nav:
- RiskIQ: xdr/features/automate/library/riskiq.md
- STIX: xdr/features/automate/library/stix.md
- Sekoia.io: xdr/features/automate/library/sekoia-io.md
- Sekoia.io: xdr/features/automate/library/sekoia-io.md
- SentinelOne: xdr/features/automate/library/sentinelone.md
- ServiceNow: xdr/features/automate/library/servicenow.md
- Shodan: xdr/features/automate/library/shodan.md
Expand Down Expand Up @@ -472,6 +473,7 @@ nav:
- RiskIQ: tip/features/automate/library/riskiq.md
- STIX: tip/features/automate/library/stix.md
- Sekoia.io: tip/features/automate/library/sekoia-io.md
- Sekoia.io: tip/features/automate/library/sekoia-io.md
- SentinelOne: tip/features/automate/library/sentinelone.md
- ServiceNow: tip/features/automate/library/servicenow.md
- Shodan: tip/features/automate/library/shodan.md
Expand Down Expand Up @@ -801,8 +803,8 @@ plugins:
xdr/develop/rest_api/identity_and_authentication.md: xdr/develop/rest_api/community.md
xdr/features/collect/ingestion_methods/sekoiaio.md: xdr/features/collect/integrations/endpoint/sekoiaio.md
xdr/features/collect/integrations/cloud_and_saas/google/google_workspace.md: xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md
xdr/features/collect/integrations/endpoint/trend_micro_deep_security.md: xdr/features/collect/integrations/endpoint/trend_micro/trend_micro_deep_security.md
xdr/features/collect/integrations/endpoint/checkpoint_harmony.md: xdr/features/collect/integrations/endpoint/checkpoint_harmony_mobile.md
xdr/features/collect/integrations/endpoint/trend_micro_deep_security.md: xdr/features/collect/integrations/endpoint/trend_micro/trend_micro_deep_security.md
xdr/features/investigate/dork_language.md: xdr/features/investigate/events_query_language.md
- redoc
- intakes_by_uuid
Expand Down

0 comments on commit e0ff378

Please sign in to comment.