cybereason-reputation
Get a specific reputation by key from the Cybereason server.
cybereason-reputation [profile=VALUE] key=VALUE
- profile=VALUE
- Optional. Cybereason connect profile identifier
- key=VALUE
- Required. The item key by which to search. You can enter a file hash value, IP address, or domain name.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Cybereason connect profile identifier |
| key | String | Key | Item key (file hash, IP address, or domain name) |
| reputation_type | String | Reputation Type | Type of reputation (FILE, DOMAIN, IP) |
| is_blocking | Boolean | Is Blocking | Whether the item is marked for blocking |
| malicious_type | String | Malicious Type | Reputation type (whitelist or blacklist) |
| comment | String | Comment | Comment added when the reputation was added |
| expiry | Date | Expiry | Expiration date for the reputation |
| user | String | User | Username who added the reputation |
| first_seen | Date | First Seen | Timestamp when the reputation was first added |
| updated | Date | Updated | Timestamp when the reputation was last updated |