SOCRadar icon

SOCRadar

Comprehensive SOCRadar API integration
Join our community

Actions21

Overview

This node integrates with the SOCRadar API to manage digital footprint data related to companies and their assets. Specifically, the "Mark False Positive" operation allows users to mark a particular asset within a company's digital footprint as a false positive. This is useful in scenarios where automated monitoring or detection systems have flagged an asset incorrectly, and you want to update its status to avoid unnecessary alerts or actions.

Practical examples include:

  • Security teams marking benign assets mistakenly identified as threats.
  • Analysts refining monitoring results by excluding known safe assets.
  • Automating cleanup of false alarms in digital footprint monitoring workflows.

Properties

Name Meaning
Company ID The unique identifier of the company whose digital footprint is being managed.
Asset ID The identifier of the specific asset within the company's digital footprint to update.

Output

The node outputs JSON data representing the result of the "Mark False Positive" operation on the specified asset. This typically includes confirmation of the update or details about the marked asset. If an error occurs, the output JSON contains error messages and additional details.

No binary data output is indicated for this operation.

Dependencies

  • Requires an active connection to the SOCRadar API using an API key credential.
  • The node expects the SOCRadar API base URL and API key to be configured in the credentials.
  • Network access to the SOCRadar service endpoint is necessary.

Troubleshooting

  • Common Issues:

    • Invalid or missing Company ID or Asset ID parameters will cause the operation to fail.
    • Incorrect or expired API key credentials will result in authentication errors.
    • Network connectivity issues can prevent successful API calls.

  • Error Messages:

    • Errors returned from the SOCRadar API are captured and included in the output JSON under error and details.
    • Typical errors might include "Unauthorized" (invalid API key), "Not Found" (invalid company or asset ID), or "Bad Request" (malformed input).

  • Resolution Tips:

    • Verify that the Company ID and Asset ID are correct and exist in the SOCRadar system.
    • Ensure the API key credential is valid and has appropriate permissions.
    • Check network connectivity and firewall settings.
    • Use the node's "Continue On Fail" option to handle errors gracefully in workflows.

Links and References

Discussion