Cisco Threat Grid Operation
The web format of this guide reflects the most current release. Guides for older iterations are available in PDF format.
Integration Details
ThreatQuotient provides the following details for this integration:
Current Integration Version | 1.2.2 |
Compatible with ThreatQ Versions | >= 3.6.0 |
Support Tier | ThreatQ Supported |
Introduction
The ThreatQuotient for Threat Grid Operation gives users the ability to submit files, URLs, and domains to Threat Grid’s analysis engine, directly from ThreatQ.
The operation provides the following action:
- Submit - submits files, URLs, and domains to Threat Grid’s analysis engine.
The operation is compatible with FQDN and URL indicators as well as Attachments.
Installation
This integration can be installed in the My Integration section of your ThreatQ instance. See the Adding an Integration topic for more details.
Configuration
ThreatQuotient does not issue API keys for third-party vendors. Contact the specific vendor to obtain API keys and other integration-related credentials.
To configure the integration:
- Navigate to your integrations management page in ThreatQ.
- Select the Operation option from the Type dropdown (optional).
- Click on the integration entry to open its details page.
- Enter the following parameters under the Configuration tab:
Parameter Description threat_grid_host Your Threat Grid host. threat_grid_api_key Your Threat Grid API Key. verify_ssl Enable/disable this parameter for SSL verification (if required). - Review any additional settings, make any changes if needed, and click on Save.
- Click on the toggle switch, located above the Additional Information section, to enable it.
Actions
The operation provides the following action:
Action | Description | Object Type | Object Subtype |
---|---|---|---|
Submit | Submits files, URLs, and domains to Threat Grid’s analysis engine. | Indicator, Attachment | FQDN, URL |
Change Log
- Version 1.0.0
- Initial release
PDF Guides
Document | ThreatQ Version |
---|---|
Cisco Threat Grid Operation Guide v1.2.2 | 3.6.0 or Greater |