Supported Cortex XSOAR versions: 6.10.0 and later.
BloxOne Threat Defense is a hybrid cybersecurity solution that leverages DNS as the first line of defense to detect and block cyber threats.
Navigate to Settings > Integrations > Servers & Services.
Search for Infoblox BloxOne Threat Defense Event Collector.
Click Add instance to create and configure a new integration instance.
Parameter Description Required Service API Key True First fetch time interval False Max events per fetch The maximum amount of events to retrieve for each event type (up to 10000 events). For more information about event types see the help section. False Trust any certificate (not secure) False Use system proxy settings False
Click Test to validate the URLs, token, and connection.
You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
Gets events. This command is for debugging purposes.
|should_push_events||Set this argument to True in order to create events, otherwise the command will only display them. Possible values are: True, False. Default is False.||Required|
|from||Timestamp indicating when to start fetching events.||Required|
|to||Timestamp indicating when to stop fetching events.||Required|
|limit||Maximum number of events to fetch. Default is 1000.||Required|
|offset||offset of the events.||Required|
|TestGetEvents||Unknown||The event data.|