Document toolboxDocument toolbox

Webroot BrightCloud

The Webroot BrightCloud Web Classification and Web Reputation Services provide the most effective way to block access to unwanted content and protect users against web-based threats.

Connect Webroot BrightCloud with Devo SOAR

  1. Navigate to Automations > Integrations.

  2. Search for Webroot BrightCloud.

  3. Click Details, then the + icon. Enter the required information in the following fields.

  4. Label: Enter a connection name.

  5. Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.

  6. Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).

  7. Remote Agent: Run this integration using the Devo SOAR Remote Agent.

  8. OEM ID: OEM ID for Webroot BrightCloud.

  9. Device ID: Device ID for Webroot BrightCloud.

  10. UID: UID for Webroot BrightCloud.

  11. After you've entered all the details, click Connect.

Actions for Webroot BrightCloud

Get WHOIS

Get WHOIS for the domain.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Domain Column

Column name from the parent table to lookup domain.

Required

Full Info

Choose option whether to fetch full information of domain (default is False).

Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False

  • error: message/null

``` {json}{ "has_error": true, "error": "Empty Value in Column 'start_node'" }

## Get URL Reputation Get Reputation and category information for URL. ### Input Field Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection. | Input Name | Description | Required | | :--------- | :----------------------------------------------- | :------- | | URL Column | Column name from the parent table to lookup URL. | Required | ### Output A JSON object containing multiple rows of result: - has_error: True/False - error: message/null ``` {json}{ "has_error": true, "error": "Empty Value in Column 'start_node'" }

Get File Reputation

Get Reputation information for file hash.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

File Hash Column

Column name from the parent table to lookup file hash.

Required

Output

A JSON object containing multiple rows of result:

  • has_error: True/False

  • error: message/null

{json}{ "has_error": true, "error": "Empty Value in Column 'start_node'" }

Release Notes

  • v2.0.0 - Updated architecture to support IO via filesystem

  • v1.0.8 - Added documentation link in the automation library.