CDC Engine 2.1.0

CDC Engine - 2.1.0

tags: python | infrastructure | cdc

Table of Contents

• Description
• CDC Command Lines
• Workflows
• Rules
• Sensors
• Triggers
• Known Issues

Description

CDC_engine is a generic pack prepared for the implementation of a higher level of automations and integration with the CDC. It uses different API frameworks supported by the CDC, such as cdc_sdk and APIs such as cdc_backend, cdc_async, cdc_public, etc.

CyberProof can use this pack for any implementation that is not directly part of cdc_sdk or async, but still related to StackStorm. All common functionality that is independent of the API and used for communication with the CDC is usually placed in this pack. Copying observable tags in alert tags is also supported using this pack, and available for all CDC APIs.

CDC Command Lines

No CDC command lines

Workflows

• add_observable_tags_to_alert
  Copies observable tags to the alert tag.

• handle_new_alert
  Handles a new alert that was created in the CDC.

• inject_alert
  This workflow will inject an alert to the CDC.

Rules

• cdc_add_observable_tags_to_alert
  This rule is for getting an alert_created webhook event from the CDC. It triggers an action for adding the tags from the observable to the alert.

• inject_alert_listener
  Triggers injecting new alerts to the CDC workflow, when a sensor dispatches a new alert to the CDC.

• new_alert_listener
  Triggered when a new alert in the CDC is created.

Sensors

No sensors

Triggers

• cdc_new_alert
  Trigger that indicates that a new alert has been created, that needs to be injected to the CDC.

Known Issues

No known issues