FireEyeiSight

Details

Author	Davide Arcuri and Andrea Garavaglia, LDO-CERT
Version	1.0
License	AGPL-V3
Website	https://github.com/LDO-CERT/Cortex-Analyzers
Requires Registration	Yes
Requires Subscription	Yes
Free Subscription Available	No
DataType Supported	domain, ip, hash, url
Service Homepage	FireEyeiSight

Description

Query domains, IPs, hashes and URLs on FireEye’s iSIGHT threat intelligence service.

Configuration

Name	Description
key	API key for FireEye iSIGHT.
pwd	Password associated to the API key.

Additional details from the README file:

FireEyeiSight

FireEyeiSight adds context and priority to global threats before, during and after an attack. Data is gleaned from the adversarial underground, virtual network detection sensors and Mandiant IR investigations from the world’s largest breaches.

The analyzer comes in only one flavor.

Requirements

You need a valid FireEye iSight subscription to use the analyzer.

Provide your API key as a value for the key parameter.
Provide your associated password as a value for pwd parameter.