Skip to main content

GCP Whitelist Feed

This Integration is part of the GCP Whitelist Feed Pack.#

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

Use the Google Cloud Platform whitelist integration to get indicators from the feed.

Configure GCP Whitelist Feed on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for GCP Whitelist Feed.
  3. Click Add instance to create and configure a new integration instance.
ParameterDescriptionRequired
feedFetch indicatorsFalse
feedReputationIndicator ReputationFalse
feedReliabilitySource ReliabilityTrue
tlp_colorThe Traffic Light Protocol (TLP) designation to apply to indicators fetched from the feed. More information about the protocol can be found at https://us-cert.cisa.gov/tlpFalse
feedExpirationPolicyFalse
feedExpirationIntervalFalse
feedFetchIntervalFeed Fetch IntervalFalse
feedTagsTagsFalse
feedBypassExclusionListBypass exclusion listFalse
insecureTrust any certificate (not secure)False
proxyUse system proxy settingsFalse
  1. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

gcp-whitelist-get-indicators#


Gets indicators from the feed.

Base Command#

gcp-whitelist-get-indicators

Input#
Argument NameDescriptionRequired
limitThe maximum number of results to return. The default value is 10.Optional
Context Output#

There is no context output for this command.

Command Example#

!gcp-whitelist-get-indicators limit=2

Context Example#
{}
Human Readable Output#

Indicators from GCP Whitelist Feed:#

valuetype
52.86.122.241/18CIDR
52.15.91.198/18CIDR