Details
| Author | Cisco Security |
| Version | 1.0 |
| License | MIT |
| Website | https://github.com/CiscoSecurity |
| Requires Registration | No |
| Requires Subscription | No |
| Free Subscription Available | No |
| DataType Supported | domain, filename, fqdn, hash, ip, url |
Description
Threat Response
Configuration
| Name | Description |
| region | Threat Response Region (us, eu, or apjc). Will default to 'us' region if left blank |
| client_id | Threat Response Client ID |
| client_password | Threat Response API Client Password |
| extract_amp_targets | Would you like to extract AMP connector GUIDs as artifacts? |