Reputation and DBot score - Developer Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Developer Guide

Product
Cortex XSIAM
Creation date
2023-05-01
Last date published
2025-02-05
Category
Developer Guide
Abstract

Format indicator data for DBot to ingest information about indicators to determine if they are malicious.

DBot is the Cortex XSIAM machine learning bot, which ingests information about indicators to determine if they are malicious. Since DBot requires a very specific dataset, you must format the data as follows. As described in Generic reputation commands, when developing an integration that implements a generic reputation command, it is necessary also to create a corresponding DBot score object.