Mandiant ASM source plugin
The Mandiant ASM plugin lets you query Mandiant ASM to ingest data.
This plugin doesn't support the use of a descriptive metadata name in the Pipeline Builder interface.
Supported telemetry types
This plugin supports these telemetry types:
Logs | Metrics | Traces |
---|---|---|
Configuration parameters
Use the parameters in this section to configure your plugin. The Telemetry Pipeline web interface uses the values in the Name column to describe the parameters. Items in the Key column are the YAML keys to use in pipeline configuration files.
General
The configured fields replace sections of the url
field in the YAML file in the
following way:
url: https://asm-api.advantage.mandiant.com/api/v1/search/SEARCH_ELEMENT/SEARCH_QUERY
Name | Key | Description | Default |
---|---|---|---|
Project ID | PROJECT_ID | Required. | none |
Search element | none | Required. Used in url field. Accepted values: entities , issues , technologies . | entities |
Search Query | none | Required. Used in url field. | none |
Access Key | INTRIGUE_ACCESS_KEY | Required. | none |
Secret Key | INTRIGUE_SECRET_KEY | Required. | none |