Cisco Umbrella Cloud Security
Supported versions
Supported Cortex XSOAR versions: 6.0.0 and later.
This integration was integrated and tested with version 1.0 of Cisco Umbrella Cloud Security.
#
Configure Cisco Umbrella Cloud Security on Cortex XSOARNavigate to Settings > Integrations > Servers & Services.
Search for Cisco Umbrella Cloud Security.
Click Add instance to create and configure a new integration instance.
Parameter Required Organization ID True API Key True API Secret False Click Test to validate the URLs, token, and connection.
#
CommandsYou can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
#
umbrella-get-destination-listsGet's all destination lists in organization
#
Base Commandumbrella-get-destination-lists
#
InputArgument Name | Description | Required |
---|---|---|
orgId | Organization ID. | Optional |
#
Context OutputPath | Type | Description |
---|---|---|
Umbrella.DestinationLists | Unknown |
#
Command Example
#
Human Readable Output#
umbrella-add-domainAdds domains to given destination list
#
Base Commandumbrella-add-domain
#
InputArgument Name | Description | Required |
---|---|---|
orgId | Optional organization ID. If not provided, will use the one provided in the integration configuration. | Optional |
destId | Destination list ID. | Required |
domains | List of domains to add to destination list (Format: domain1.com,domain2.com). | Required |
comment | Note on what the domain is or why it is being added. Default is Added from XSOAR. | Optional |
#
Context OutputThere is no context output for this command.
#
Command Example
#
Human Readable Output#
umbrella-get-destination-domainsGet's the domains listed in a destination list
#
Base Commandumbrella-get-destination-domains
#
InputArgument Name | Description | Required |
---|---|---|
orgId | Optional orgId, by default uses the one set in the instance configuration. | Optional |
destId | Destination list ID to get domains from. Use umbrella-get-destination-lists to get the list ID. | Required |
#
Context OutputThere is no context output for this command.
#
Command Example
#
Human Readable Output#
umbrella-remove-domainRemoves domains to given destination list
#
Base Commandumbrella-remove-domain
#
InputArgument Name | Description | Required |
---|---|---|
orgId | Optional organization ID. If not provided, will use the one provided in the integration configuration. | Optional |
destId | Destination list ID. | Required |
domainIds | List of entry IDs to remove from destination list (Format: 1234,1235). | Required |
#
Context OutputThere is no context output for this command.
#
Command Example