diff --git a/responders/Gmail/Gmail.json b/responders/Gmail/Gmail.json new file mode 100644 index 0000000..f06098e --- /dev/null +++ b/responders/Gmail/Gmail.json @@ -0,0 +1,75 @@ +{ + "name": "Gmail", + "version": "0.2", + "author": "David Strassegger, OSCD", + "url": "https://github.com/TheHive-Project/Cortex-Analyzers", + "license": "MIT", + "description": "Move emails from a given domain to trash on Gmail", + "dataTypeList": ["thehive:case_artifact"], + "command": "Gmail/Gmail.py", + "baseConfig": "Gmail", + "config": { + "max_tlp": 2, + "check_tlp": false, + "max_pap": 2, + "check_pap": true + }, + "configurationItems": [ + { + "name": "thehive_url", + "description": "URL for thehive instance", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "thehive_api_key", + "description": "API key for TheHive instance", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_project_id", + "description": "GCP Project ID", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_private_key_id", + "description": "Service account private key id", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_private_key", + "description": "Service Account private key (PEM Format)", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_client_email", + "description": "Service Account E-Mail address", + "type": "string", + "multi": false, + "required": true + }, + { + "name": "gmail_client_id", + "description": "OAuth Client ID", + "type": "string", + "multi": false, + "required": true + } + ] + } diff --git a/responders/Gmail/Gmail_BlockDomain.json b/responders/Gmail/Gmail_BlockDomain.json index d24b14d..03bc6ad 100644 --- a/responders/Gmail/Gmail_BlockDomain.json +++ b/responders/Gmail/Gmail_BlockDomain.json @@ -1,6 +1,6 @@ { "name": "Gmail_BlockDomain", - "version": "0.1", + "version": "0.2", "author": "David Strassegger, OSCD", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "MIT", @@ -30,6 +30,13 @@ "multi": false, "required": true }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, { "name": "gmail_project_id", "description": "GCP Project ID", diff --git a/responders/Gmail/Gmail_BlockSender.json b/responders/Gmail/Gmail_BlockSender.json index 186644e..361262f 100644 --- a/responders/Gmail/Gmail_BlockSender.json +++ b/responders/Gmail/Gmail_BlockSender.json @@ -1,6 +1,6 @@ { "name": "Gmail_BlockSender", - "version": "0.1", + "version": "0.2", "author": "David Strassegger, OSCD", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "MIT", @@ -30,6 +30,13 @@ "multi": false, "required": true }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, { "name": "gmail_project_id", "description": "GCP Project ID", diff --git a/responders/Gmail/Gmail_DeleteMessage.json b/responders/Gmail/Gmail_DeleteMessage.json index 2465cf5..4772141 100644 --- a/responders/Gmail/Gmail_DeleteMessage.json +++ b/responders/Gmail/Gmail_DeleteMessage.json @@ -1,6 +1,6 @@ { "name": "Gmail_DeleteMessage", - "version": "0.1", + "version": "0.2", "author": "David Strassegger, OSCD", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "MIT", @@ -30,6 +30,13 @@ "multi": false, "required": true }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, { "name": "gmail_project_id", "description": "GCP Project ID", diff --git a/responders/Gmail/Gmail_UnblockDomain.json b/responders/Gmail/Gmail_UnblockDomain.json index 3fde51a..caacf0c 100644 --- a/responders/Gmail/Gmail_UnblockDomain.json +++ b/responders/Gmail/Gmail_UnblockDomain.json @@ -1,6 +1,6 @@ { "name": "Gmail_UnblockDomain", - "version": "0.1", + "version": "0.2", "author": "David Strassegger, OSCD", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "MIT", @@ -30,6 +30,13 @@ "multi": false, "required": true }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, { "name": "gmail_project_id", "description": "GCP Project ID", diff --git a/responders/Gmail/Gmail_UnblockSender.json b/responders/Gmail/Gmail_UnblockSender.json index 802aa9d..001e5dc 100644 --- a/responders/Gmail/Gmail_UnblockSender.json +++ b/responders/Gmail/Gmail_UnblockSender.json @@ -1,6 +1,6 @@ { "name": "Gmail_UnblockSender", - "version": "0.1", + "version": "0.2", "author": "David Strassegger, OSCD", "url": "https://github.com/TheHive-Project/Cortex-Analyzers", "license": "MIT", @@ -30,6 +30,13 @@ "multi": false, "required": true }, + { + "name": "gmail_domain", + "description": "Gsuite Domain", + "type": "string", + "multi": false, + "required": true + }, { "name": "gmail_project_id", "description": "GCP Project ID",