Skip to main content

Cisco Threat Grid

cisco-threat-grid

Version: 1.2
Updated: Jul 11, 2023

Utilize the Cisco AMP Threat Grid to retrieve information about incident elements such as IP, domain, or file hash.

Actions

  • IP Reputation (Enrichment) - Search Cisco AMP ThreatGrid for reputation information on the specified IP.
  • URL Reputation (Enrichment) - Search Cisco AMP ThreatGrid for reputation information on the specified URL.
  • Domain Reputation (Enrichment) - Search Cisco AMP ThreatGrid for reputation information on the specified domain.
  • Detonate File (Enrichment) - Detonate the specified file.
  • PCAP Of A Detonated File (Enrichment) - Get the PCAP file generated during the detonation of the file.
  • Detonate Report (Enrichment) - Get the report generated during the detonation of the file, specified by File Hash.
  • Detonate URL (Enrichment) - Detonate remote file from a specified URL.

Change Log

  • February 5, 2020 - First upload
  • July 7, 2023 (v1.2)
    • Updated the integration with Environmental Variables
    • Integration renamed from CISCO Threat Grid OIF to CISCO Threat Grid
    • Changed fields visibility
Legal
Privacy Statement
Terms of Use

Copyright © 2024 by Sumo Logic, Inc.