cybereason-reputation-batch
Get reputations in batch mode from the Cybereason server.
cybereason-reputation-batch profile=VALUE
- profile=VALUE
- Required. Cybereason connect profile identifier
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| success | Boolean | Success | Whether the API call was successful |
| key | String | Key | Item key (file hash, IP address, or domain name) |
| reputation_type | String | Reputation type | Type of reputation (FILE, DOMAIN, IP) |
| is_blocking | Boolean | Is blocking | Whether the item is marked for blocking |
| malicious_type | String | Malicious type | Reputation type (whitelist or blacklist) |
| comment | String | Comment | Comment added when the reputation was added |
| expiry | Date | Expiry | Expiration date for the reputation |
| user | String | User | Username who added the reputation |
| first_seen | Date | First seen | Timestamp when the reputation was first added |
| updated | Date | Updated | Timestamp when the reputation was last updated |