Skip to main content
Flashpoint app icon

Flashpoint

This app implements the investigative actions for the Flashpoint on the Phantom PlatformBuilt by srv-stage-community
soar product badge
Default Version 1.0.1

September 17, 2021

Compatibility

SOAR On-Prem

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#3 in Endpoint

This app implements the investigative actions for the Flashpoint on the Phantom Platform

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • list reports: Fetch a list of all the intelligence reports from the Flashpoint Platform
  • get report: Fetch a specific intelligence report from the Flashpoint Platform for the provided report ID
  • list related reports: Fetch a list of all the related intelligence reports from the Flashpoint Platform for the provided report ID
  • get compromised credentials: Fetch a list of all the Credential Sightings from the Flashpoint Platform
  • run query: Fetch the data by performing a universal search from the Flashpoint Platform
  • list indicators: Fetch a list of IoCs that occur in the context of an event from the Flashpoint Platform
  • search indicators: Fetch an IoC value of a specific attribute type from the list of available IoCs on the Flashpoint Platform