Details

This atomic belongs to the Cisco Threat Response atomic group.

Requests a Threat Response access token using the account keys associated with the target provided to the atomic.

Target: HTTP Endpoint for "visibility.amp.cisco.com" with a path of "/iroh"

Account Key: HTTP Basic Authentication with a SecureX API client ID and secret

Steps:
[] Attempt to fetch an access token
[] Check if the request was successful:
[]> If it was, extract the token data and set the output variables
[]> If it wasn't, output an error

More information about this API: https://visibility.amp.cisco.com/iroh/oauth2/index.html

About
Authorship
Cisco Managed