Details

This atomic belongs to the Cisco Umbrella atomic group.

Gets a list of top threats from within the given timeframe. If no threat type is provided, all threats will be included. See the "Threat Type" input variable for more information about supported filters. The "Additional Parameters" input variable can be used to provide additional query string parameters which will be passed through to Umbrella. This atomic requires read permission to the "Reports / Aggregations" API scope.

Target: HTTP Endpoint for "reports.api.umbrella.com"

Account Key: None (uses an access token)

Steps:
[] Check if a threat type was provided. If so, prepend a forward slash so it can be inserted into the request URL
[] Make the API request for the report entries
[] Check if the API request succeeded:
[]> If it did, set the output variable
[]> If it didn't, output an error

More information about this API: https://developer.cisco.com/docs/cloud-security/top-threats-all/

About
Integration
Authorship
Cisco Managed