Mandiant ASM source plugin

The Mandiant ASM plugin lets you query Mandiant ASM to ingest data.

This plugin doesn't support the use of a descriptive metadata name in the Pipeline Builder interface.

Configuration parameters

The Mandiant ASM source plugin provides these configuration parameters. Items in the Name column display in the Calyptia Dashboard. Items in the Key column are the YAML keys to use in pipeline configuration files.

General

The configured fields replace sections of the url field in the YAML file in the following way:

url: https://asm-api.advantage.mandiant.com/api/v1/search/SEARCH_ELEMENT/SEARCH_QUERY
NameKeyDescriptionDefault
Project IDPROJECT_IDRequired.none
Search elementnoneRequired. Used in url field. Accepted values: entities, issues, technologies.entities
Search QuerynoneRequired. Used in url field.none
Access KeyINTRIGUE_ACCESS_KEYRequired.none
Secret KeyINTRIGUE_SECRET_KEYRequired.none