CTM360 | Marketplace

Details
Content
Dependencies
Version History

Take action on incidents derived from threat intelligence that is directly linked to your organization.

In External Attack Surface Management, HackerView provides an inventory of your digital assets discovered automatically, identifies issues (including vulnerabilities, misconfigurations, and exposures) in these digital assets, and generates a digital risk scorecard for your organization. The scorecard can also be generated for a limited number of your vendors for free.

In Digital Risk Protection, CyberBlindspot detects threats across the surface, deep, and dark web and monitors for over 40 threat types, i.e., actual or potential threats targeting your organization, brands, and executives. These incidents include phishing, social media fraud, suspicious mobile apps, look-alike domains, data leakage, etc.

What is CTM360?

CTM360 is a Software-as-a-Service (SaaS) technology platform that provides External Attack Surface Management, Digital Risk Protection, and Cyber Threat Intelligence in one consolidated platform.

What does this pack do?

This pack allows you to integrate HackerView & CyberBlindspot incidents with Cortex XSOAR. Automated integration fetches and populates incidents into Cortex XSOAR from HackerView & CyberBlindspot platforms along with all the details of the incident and leads the Cortex XSOAR analyst to take relevant actions over the incidents such as:

HackerView:
- Incident response and feedback.
CyberBlindspot:
- Closing the incident.
- Issuing an asset takedown request.

How to use it?

Install the pack and configure either one of the integration instances in Cortex XSOAR. For the configuration phase you will need an active API key which can be obtained in the respective platform. For any further support and questions, feel free to contact us via xsoar@ctm360.com

Pack Contributors

Sayed A.

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Sayed A.

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

What is CTM360?

CTM360 is a Software-as-a-Service (SaaS) technology platform that provides External Attack Surface Management, Digital Risk Protection, and Cyber Threat Intelligence in one consolidated platform.

What does this pack do?

This pack allows you to integrate HackerView & CyberBlindspot incidents with Cortex. Automated integration fetches and populates incidents into Cortex from HackerView & CyberBlindspot platforms along with all the details of the incident and leads the Cortex analyst to take relevant actions over the incidents such as:

HackerView:
- Incident response and feedback.
CyberBlindspot:
- Closing the incident.
- Issuing an asset takedown request.

How to use it?

Install the pack and configure either one of the integration instances in Cortex. For the configuration phase you will need an active API key which can be obtained in the respective platform. For any further support and questions, feel free to contact us via xsoar@ctm360.com

Pack Contributors

Sayed A.

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Sayed A.

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Classifiers

Name	Description
CTM360-CyberBlindspot - Incoming Mapper	Maps incoming CTM360 CyberBlindspot incidents.
CTM360-HackerView - Incoming Mapper	Maps incoming CTM360 HackerView incidents.

Dashboards

Name	Description
HackerView Deep Scan Dashboard
HackerView Incident Dashboard
CyberBlindspot Incident Dashboard

Incident Fields

Name	Description
CTM360 HackerView Potential Impact	Actions that can be taken on a HackerView incident.
CTM360 CyberBlindspot ML Date Compromised	The date of the compromise.
CTM360 CyberBlindspot MM Suspect Phones	Phone numbers associated with the money mule.
CTM360 CyberBlindspot MM Bank Name	Bank name tied to the mule.
CTM360 CyberBlindspot BC Email	The email related to the breach.
CTM360 CyberBlindspot ML Sources	The sources reporting the compromise.
CTM360 CyberBlindspot MM Bank Account Country	Country of the bank account.
CTM360 CyberBlindspot MM Suspect Emails	Email addresses associated with the money mule.
CTM360 CyberBlindspot MM Account Identifier	Account identifier tied to the mule.
CTM360 HackerView DS Ticket ID	HackerView ticket identifier (e.g. HVI-…).
CTM360 CyberBlindspot Remarks	Remarks concerning the incident.
CTM360 CyberBlindspot CC CVV	The compromised card's Card Verification Value (CVV).
CTM360 CyberBlindspot Brand	The brand related to the incident.
CTM360 HackerView DS Domain	Domain associated with the asset.
CTM360 CyberBlindspot BC Domain	The domain related to the breach.
CTM360 HackerView DS EPSS Score	Exploit Prediction Scoring System (EPSS) score.
CTM360 HackerView Potential Attack Types	Attacks that may be attempted.
CTM360 HackerView DS Known Exploited	Whether the vulnerability is known to be exploited.
CTM360 CyberBlindspot MM Suspect Names	Names associated with the money mule.
CTM360 CyberBlindspot ML User Domain	The domain of the compromised user.
CTM360 CyberBlindspot GS Status Code	HTTP status code from scan.
CTM360 CyberBlindspot MM Transfer Currency	Currency code for the transfer.
CTM360 CyberBlindspot CC Card Number	The compromised card's number.
CTM360 CyberBlindspot GS External Links	External links discovered.
CTM360 CyberBlindspot GS Title	Page title observed during scan.
CTM360 CyberBlindspot GS Resolving IP	Resolved IP for the site.
CTM360 CyberBlindspot ML Operating System	The operating system of the compromised device.
CTM360 HackerView DS Evidence Request	HTTP request evidence for the finding.
CTM360 HackerView DS Port	Network port associated with the finding.
CTM360 CyberBlindspot Module	Module the incident belongs to.
CTM360 CyberBlindspot GS Tags	Tags applied to the finding.
CTM360 CyberBlindspot CC Expiry Year	The compromised card's expiry year.
CTM360 HackerView DS Issue Type	Type or classification of the issue.
CTM360 CyberBlindspot MM BIC	Bank Identifier Code.
CTM360 HackerView DS CPE	Common Platform Enumeration (CPE) identifier.
CTM360 HackerView DS IP	IP address associated with the finding.
CTM360 CyberBlindspot BC Password	The password related to the breach.
CTM360 CyberBlindspot Incident Type	The type of the incident.
CTM360 HackerView DS Asset	Affected asset (e.g. host:port).
CTM360 CyberBlindspot MM Money Mule ID	CBS money mule finding ID.
CTM360 CyberBlindspot ML Stealer Family	The family of the malware.
CTM360 CyberBlindspot BC Breach Source	The source of the breach.
CTM360 CyberBlindspot Ticket ID	The ticket ID of the incident.
CTM360 CyberBlindspot GS Finding ID	CBS gambling-site finding ID.
CTM360 HackerView DS CVSS Metrics	CVSS vector or metric string.
CTM360 CyberBlindspot Status	The status of the incident.
CTM360 CyberBlindspot Class	The class of the incident.
CTM360 CyberBlindspot SMF Platform	Social network platform (e.g. Twitter).
CTM360 CyberBlindspot First Seen	The first time the incident was seen.
CTM360 HackerView DS URL	Base URL of the affected asset or service.
CTM360 HackerView DS URI	URI path or resource related to the finding.
CTM360 CyberBlindspot Screenshots	The screenshot evidence files associated with the incident.
CTM360 HackerView DS Issue Description	Detailed description of the issue.
CTM360 CyberBlindspot ML Malware Path	The path of the in which the malware was installed on the compromised device.
CTM360 CyberBlindspot Incident Status	Platform-specific incident status (distinct from status).
CTM360 CyberBlindspot Course of Action	Actions that can be taken on a CyberBlindspot incident.
CTM360 CyberBlindspot CC Expiry Month	The compromised card's expiry month.
CTM360 HackerView Scan Type	Scan type of the incident.
CTM360 CyberBlindspot ML User	The user of the compromised account.
CTM360 HackerView DS Evidence Response	HTTP response evidence for the finding.
CTM360 CyberBlindspot GS Internal Links	Internal links discovered.
CTM360 CyberBlindspot GS Enrichment	DNS enrichment payload.
CTM360 HackerView Brand	The organization brand the incident belongs to.
CTM360 CyberBlindspot Last Seen	The last time the incident was seen.
CTM360 CyberBlindspot GS Scan Status	Scan completion status.
CTM360 CyberBlindspot ML Masked Password	The masked password of the compromised account.
CTM360 CyberBlindspot ML Domain	The domain related to the compromised device.
CTM360 CyberBlindspot ML Password	The password of the compromised account.
CTM360 CyberBlindspot ML Website	The website compromised.
CTM360 CyberBlindspot Subject	The subject of the incident.
CTM360 CyberBlindspot BC Username	The username related to the breach.
CTM360 CyberBlindspot GS Submitted URL	URL submitted to CBS for scanning.
CTM360 CyberBlindspot GS Landing URL	Landing page URL observed for the site.
CTM360 HackerView DS Evidence cURL Command	cURL command to reproduce the finding.
CTM360 CyberBlindspot ML Source URI	The source URI of the compromise report.
CTM360 HackerView DS CVSS Score	CVSS base score for the vulnerability.
CTM360 CyberBlindspot GS URL	Primary gambling site URL.
CTM360 CyberBlindspot SMF Risk Score	Numeric risk score from CBS.
CTM360 HackerView DS Progress Status	Progress of incident response on the platform.
CTM360 CyberBlindspot ML Software	The software that was compromised.
CTM360 HackerView Technologies	Technologies associated with a HackerView incident.
CTM360 CyberBlindspot ML URL Path	The path of the URL.
CTM360 CyberBlindspot ML Hostname	The hostname of the compromised device.
CTM360 CyberBlindspot GS URL Status	URL reachability status.
CTM360 CyberBlindspot Timestamp	The timestamp of the incident.
CTM360 CyberBlindspot ML Computer Name	The name of the computer that was compromised.
CTM360 HackerView Asset Type	Type of affected asset(s).
CTM360 CyberBlindspot Confirmation Time	The time the incident was confirmed.
CTM360 CyberBlindspot Risks	Risks associated with the incident.
CTM360 CyberBlindspot MM Bank Account Holder Name	Name on the bank account.
CTM360 CyberBlindspot MM Transfer Amount	Transfer amount when present.
CTM360 CyberBlindspot BC Executive Name	The name of the executive related to the breach.
CTM360 CyberBlindspot Severity	The severity of the incident.

Incident Types

Name	Description
CyberBlindspot Incident
HackerView Incident

Integrations

Name	Description
CTM360 HackerView (Partner Contribution)	External Attack Surface Management platform, which combines automated asset discovery, issue identification / management, remediation guidelines, security ratings and third party risk management.
CTM360 CyberBlindspot (Partner Contribution)	Take action on incidents derived from CTM360 CBS threat intelligence that is directly linked to your organization.

Playbooks

Name	Description
CyberBlindspot Retrieve Incident Screenshots	This playbook retrieves screenshot evidence from the CyberBlindspot API and adds it to the incident.
CyberBlindspot Incident Management V2	This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the incident, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the incident if any.
HackerView Incident Management V2	This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation. When the remote HackerView ticket status becomes inactive, the playbook automatically closes the local incident via the Close Incident Locally task (closeInvestigation). The HackerView Incident type is configured to run this playbook with autorun enabled, so no analyst prompt is required for that auto-close path.
HackerView Incident Management	This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation.
CyberBlindspot Incident Management	This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the incident, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the incident if any.
CyberBlindspot Incident Management V3	This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the incident, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the incident if any.

Classifiers

Name	Description
CTM360-CyberBlindspot - Incoming Mapper	Maps incoming CTM360 CyberBlindspot incidents.
CTM360-HackerView - Incoming Mapper	Maps incoming CTM360 HackerView incidents.

Incident Fields

Name	Description
CTM360 HackerView Asset Type	Type of affected asset(s).
CTM360 CyberBlindspot GS Submitted URL	URL submitted to CBS for scanning.
CTM360 HackerView DS Issue Type	Type or classification of the issue.
CTM360 CyberBlindspot ML Website	The website compromised.
CTM360 CyberBlindspot ML User	The user of the compromised account.
CTM360 CyberBlindspot MM Money Mule ID	CBS money mule finding ID.
CTM360 HackerView Technologies	Technologies associated with a HackerView incident.
CTM360 HackerView DS Evidence cURL Command	cURL command to reproduce the finding.
CTM360 CyberBlindspot Remarks	Remarks concerning the incident.
CTM360 CyberBlindspot MM Bank Account Holder Name	Name on the bank account.
CTM360 CyberBlindspot ML Sources	The sources reporting the compromise.
CTM360 HackerView DS EPSS Score	Exploit Prediction Scoring System (EPSS) score.
CTM360 CyberBlindspot GS Tags	Tags applied to the finding.
CTM360 CyberBlindspot ML User Domain	The domain of the compromised user.
CTM360 CyberBlindspot MM Account Identifier	Account identifier tied to the mule.
CTM360 CyberBlindspot GS Resolving IP	Resolved IP for the site.
CTM360 CyberBlindspot First Seen	The first time the incident was seen.
CTM360 CyberBlindspot ML Masked Password	The masked password of the compromised account.
CTM360 CyberBlindspot MM Bank Account Country	Country of the bank account.
CTM360 CyberBlindspot ML URL Path	The path of the URL.
CTM360 CyberBlindspot MM Suspect Names	Names associated with the money mule.
CTM360 CyberBlindspot Class	The class of the incident.
CTM360 CyberBlindspot GS Enrichment	DNS enrichment payload.
CTM360 HackerView DS Domain	Domain associated with the asset.
CTM360 CyberBlindspot SMF Platform	Social network platform (e.g. Twitter).
CTM360 HackerView DS Evidence Request	HTTP request evidence for the finding.
CTM360 CyberBlindspot GS Internal Links	Internal links discovered.
CTM360 CyberBlindspot ML Source URI	The source URI of the compromise report.
CTM360 CyberBlindspot ML Stealer Family	The family of the malware.
CTM360 HackerView DS Progress Status	Progress of incident response on the platform.
CTM360 CyberBlindspot CC Expiry Year	The compromised card's expiry year.
CTM360 CyberBlindspot GS Title	Page title observed during scan.
CTM360 HackerView DS URI	URI path or resource related to the finding.
CTM360 CyberBlindspot MM Bank Name	Bank name tied to the mule.
CTM360 CyberBlindspot Confirmation Time	The time the incident was confirmed.
CTM360 HackerView Scan Type	Scan type of the incident.
CTM360 CyberBlindspot CC Card Number	The compromised card's number.
CTM360 CyberBlindspot Incident Type	The type of the incident.
CTM360 HackerView DS URL	Base URL of the affected asset or service.
CTM360 CyberBlindspot Course of Action	Actions that can be taken on a CyberBlindspot incident.
CTM360 CyberBlindspot MM Suspect Emails	Email addresses associated with the money mule.
CTM360 HackerView DS Ticket ID	HackerView ticket identifier (e.g. HVI-…).
CTM360 CyberBlindspot MM Transfer Amount	Transfer amount when present.
CTM360 HackerView DS IP	IP address associated with the finding.
CTM360 CyberBlindspot GS Scan Status	Scan completion status.
CTM360 CyberBlindspot Status	The status of the incident.
CTM360 CyberBlindspot Ticket ID	The ticket ID of the incident.
CTM360 CyberBlindspot CC Expiry Month	The compromised card's expiry month.
CTM360 CyberBlindspot ML Operating System	The operating system of the compromised device.
CTM360 CyberBlindspot MM Transfer Currency	Currency code for the transfer.
CTM360 CyberBlindspot CC CVV	The compromised card's Card Verification Value (CVV).
CTM360 CyberBlindspot GS Status Code	HTTP status code from scan.
CTM360 HackerView DS Asset	Affected asset (e.g. host:port).
CTM360 CyberBlindspot ML Hostname	The hostname of the compromised device.
CTM360 HackerView Potential Attack Types	Attacks that may be attempted.
CTM360 CyberBlindspot BC Executive Name	The name of the executive related to the breach.
CTM360 CyberBlindspot GS Finding ID	CBS gambling-site finding ID.
CTM360 CyberBlindspot Module	Module the incident belongs to.
CTM360 CyberBlindspot ML Date Compromised	The date of the compromise.
CTM360 CyberBlindspot BC Password	The password related to the breach.
CTM360 HackerView Potential Impact	Actions that can be taken on a HackerView incident.
CTM360 CyberBlindspot Subject	The subject of the incident.
CTM360 CyberBlindspot ML Domain	The domain related to the compromised device.
CTM360 CyberBlindspot Severity	The severity of the incident.
CTM360 HackerView DS Issue Description	Detailed description of the issue.
CTM360 CyberBlindspot BC Username	The username related to the breach.
CTM360 CyberBlindspot ML Software	The software that was compromised.
CTM360 CyberBlindspot MM Suspect Phones	Phone numbers associated with the money mule.
CTM360 CyberBlindspot Timestamp	The timestamp of the incident.
CTM360 CyberBlindspot BC Domain	The domain related to the breach.
CTM360 CyberBlindspot Risks	Risks associated with the incident.
CTM360 CyberBlindspot GS Landing URL	Landing page URL observed for the site.
CTM360 CyberBlindspot BC Breach Source	The source of the breach.
CTM360 CyberBlindspot Incident Status	Platform-specific incident status (distinct from status).
CTM360 CyberBlindspot Screenshots	The screenshot evidence files associated with the incident.
CTM360 CyberBlindspot SMF Risk Score	Numeric risk score from CBS.
CTM360 HackerView DS Known Exploited	Whether the vulnerability is known to be exploited.
CTM360 CyberBlindspot GS URL	Primary gambling site URL.
CTM360 CyberBlindspot BC Email	The email related to the breach.
CTM360 CyberBlindspot ML Password	The password of the compromised account.
CTM360 HackerView Brand	The organization brand the incident belongs to.
CTM360 CyberBlindspot ML Malware Path	The path of the in which the malware was installed on the compromised device.
CTM360 CyberBlindspot ML Computer Name	The name of the computer that was compromised.
CTM360 CyberBlindspot Brand	The brand related to the incident.
CTM360 HackerView DS Evidence Response	HTTP response evidence for the finding.
CTM360 HackerView DS CVSS Score	CVSS base score for the vulnerability.
CTM360 HackerView DS CVSS Metrics	CVSS vector or metric string.
CTM360 CyberBlindspot GS URL Status	URL reachability status.
CTM360 HackerView DS CPE	Common Platform Enumeration (CPE) identifier.
CTM360 CyberBlindspot Last Seen	The last time the incident was seen.
CTM360 HackerView DS Port	Network port associated with the finding.
CTM360 CyberBlindspot MM BIC	Bank Identifier Code.
CTM360 CyberBlindspot GS External Links	External links discovered.

Incident Types

Name	Description
CyberBlindspot Incident
HackerView Incident

Integrations

Name	Description
CTM360 CyberBlindspot (Partner Contribution)	Take action on incidents derived from CTM360 CBS threat intelligence that is directly linked to your organization.
CTM360 HackerView (Partner Contribution)	External Attack Surface Management platform, which combines automated asset discovery, issue identification / management, remediation guidelines, security ratings and third party risk management.

Playbooks

Name	Description
CyberBlindspot Alert Management	This playbook runs the alerts through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the alert, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the alert if any.
CyberBlindspot Alert Management V2	This playbook runs the alerts through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the alert, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the alert if any.
CyberBlindspot Retrieve Alert Screenshots	This playbook retrieves screenshot evidence from the CyberBlindspot API and adds it to the alert.
CyberBlindspot Alert Management V3	This playbook runs the alerts through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to assist the user in the next course of action (Whether it be closing the alert, initiating the takedown of an online asset or simply waiting for a process on the remote server to end) to take on the alert if any.
HackerView Alert Management V2	This playbook runs the alerts through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation. When the remote HackerView ticket status becomes inactive, the playbook automatically closes the local alert via the Close Alert Locally task (closeInvestigation). The HackerView Alert type is configured to run this playbook with autorun enabled, so no analyst prompt is required for that auto-close path.
HackerView Alert Management	This playbook runs the alerts through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation.

Required Content Packs (3)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (6)

Pack Name	Pack By
Base	By: Cortex XSOAR
Rasterize	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

2.3.5 - 11215107 (July 21, 2026)

Dashboards

New: HackerView Deep Scan Dashboard

Added a dedicated dashboard for HackerView Deep Scan module metrics.

CyberBlindspot Incident Dashboard

Updated dashboard filters to support Social Media Fraud, Money Mules, and Gambling Sites incident types.

Incident Fields

New: CTM360 HackerView DS CVSS Score
New: Added a new incident field- CTM360 HackerView DS CVSS Score that CVSS base score for the vulnerability.
New: CTM360 HackerView DS CVSS Metrics
New: Added a new incident field- CTM360 HackerView DS CVSS Metrics that CVSS vector or metric string.
New: CTM360 HackerView DS Asset
New: Added a new incident field- CTM360 HackerView DS Asset that Affected asset (e.g. host:port).
New: CTM360 HackerView DS Issue Description
New: Added a new incident field- CTM360 HackerView DS Issue Description that Detailed description of the issue.
New: CTM360 HackerView DS URI
New: Added a new incident field- CTM360 HackerView DS URI that URI path or resource related to the finding.
New: CTM360 HackerView DS Port
New: Added a new incident field- CTM360 HackerView DS Port that Network port associated with the finding.
New: CTM360 HackerView DS Known Exploited
New: Added a new incident field- CTM360 HackerView DS Known Exploited that Whether the vulnerability is known to be exploited.
New: CTM360 HackerView Brand
New: Added a new incident field- CTM360 HackerView Brand that The organization brand the incident belongs to.
New: CTM360 HackerView DS Ticket ID
New: Added a new incident field- CTM360 HackerView DS Ticket ID that HackerView ticket identifier (e.g. HVI-…).
New: CTM360 HackerView DS Evidence Response
New: Added a new incident field- CTM360 HackerView DS Evidence Response that HTTP response evidence for the finding.
New: CTM360 HackerView DS URL
New: Added a new incident field- CTM360 HackerView DS URL that Base URL of the affected asset or service.
New: CTM360 HackerView DS Evidence cURL Command
New: Added a new incident field- CTM360 HackerView DS Evidence cURL Command that cURL command to reproduce the finding.
New: CTM360 HackerView DS CPE
New: Added a new incident field- CTM360 HackerView DS CPE that Common Platform Enumeration (CPE) identifier.
New: CTM360 HackerView DS Issue Type
New: Added a new incident field- CTM360 HackerView DS Issue Type that Type or classification of the issue.
New: CTM360 HackerView Scan Type
New: Added a new incident field- CTM360 HackerView Scan Type that Scan type of the incident.
New: CTM360 HackerView DS Evidence Request
New: Added a new incident field- CTM360 HackerView DS Evidence Request that HTTP request evidence for the finding.
New: CTM360 HackerView DS EPSS Score
New: Added a new incident field- CTM360 HackerView DS EPSS Score that Exploit Prediction Scoring System (EPSS) score.
New: CTM360 HackerView DS Progress Status
New: Added a new incident field- CTM360 HackerView DS Progress Status that Progress of incident response on the platform.
New: CTM360 HackerView DS Domain
New: Added a new incident field- CTM360 HackerView DS Domain that Domain associated with the asset.
New: CTM360 HackerView DS IP
New: Added a new incident field- CTM360 HackerView DS IP that IP address associated with the finding.
New: CTM360 CyberBlindspot Incident Status
New: Added a new incident field- CTM360 CyberBlindspot Incident Status that Status of the incident on the platform.
New: CTM360 CyberBlindspot SMF Platform
New: Added a new incident field- CTM360 CyberBlindspot SMF Platform that Social media platform associated with the fraud finding.
New: CTM360 CyberBlindspot SMF Risk Score
New: Added a new incident field- CTM360 CyberBlindspot SMF Risk Score that Risk score for the social media fraud finding.
New: CTM360 CyberBlindspot MM Money Mule ID
New: Added a new incident field- CTM360 CyberBlindspot MM Money Mule ID that Unique identifier for the money mule record.
New: CTM360 CyberBlindspot MM Account Identifier
New: Added a new incident field- CTM360 CyberBlindspot MM Account Identifier that Account identifier associated with the money mule.
New: CTM360 CyberBlindspot MM BIC
New: Added a new incident field- CTM360 CyberBlindspot MM BIC that Bank Identifier Code (BIC) for the money mule account.
New: CTM360 CyberBlindspot MM Bank Name
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Name that Name of the bank associated with the money mule.
New: CTM360 CyberBlindspot MM Bank Account Holder Name
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Account Holder Name that Name of the bank account holder.
New: CTM360 CyberBlindspot MM Bank Account Country
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Account Country that Country of the bank account.
New: CTM360 CyberBlindspot MM Transfer Amount
New: Added a new incident field- CTM360 CyberBlindspot MM Transfer Amount that Transfer amount associated with the money mule.
New: CTM360 CyberBlindspot MM Transfer Currency
New: Added a new incident field- CTM360 CyberBlindspot MM Transfer Currency that Currency of the transfer.
New: CTM360 CyberBlindspot MM Suspect Names
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Names that Names of suspects linked to the money mule.
New: CTM360 CyberBlindspot MM Suspect Emails
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Emails that Email addresses of suspects linked to the money mule.
New: CTM360 CyberBlindspot MM Suspect Phones
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Phones that Phone numbers of suspects linked to the money mule.
New: CTM360 CyberBlindspot GS Finding ID
New: Added a new incident field- CTM360 CyberBlindspot GS Finding ID that Unique identifier for the gambling site finding.
New: CTM360 CyberBlindspot GS Title
New: Added a new incident field- CTM360 CyberBlindspot GS Title that Title of the gambling site finding.
New: CTM360 CyberBlindspot GS URL
New: Added a new incident field- CTM360 CyberBlindspot GS URL that URL of the gambling site.
New: CTM360 CyberBlindspot GS Submitted URL
New: Added a new incident field- CTM360 CyberBlindspot GS Submitted URL that URL submitted for scanning.
New: CTM360 CyberBlindspot GS Landing URL
New: Added a new incident field- CTM360 CyberBlindspot GS Landing URL that Landing URL reached after redirection.
New: CTM360 CyberBlindspot GS URL Status
New: Added a new incident field- CTM360 CyberBlindspot GS URL Status that Status of the gambling site URL.
New: CTM360 CyberBlindspot GS Scan Status
New: Added a new incident field- CTM360 CyberBlindspot GS Scan Status that Scan status of the gambling site finding.
New: CTM360 CyberBlindspot GS Status Code
New: Added a new incident field- CTM360 CyberBlindspot GS Status Code that HTTP status code for the gambling site URL.
New: CTM360 CyberBlindspot GS Resolving IP
New: Added a new incident field- CTM360 CyberBlindspot GS Resolving IP that IP address the gambling site URL resolves to.
New: CTM360 CyberBlindspot GS Tags
New: Added a new incident field- CTM360 CyberBlindspot GS Tags that Tags associated with the gambling site finding.
New: CTM360 CyberBlindspot GS Enrichment
New: Added a new incident field- CTM360 CyberBlindspot GS Enrichment that Enrichment data for the gambling site finding.
New: CTM360 CyberBlindspot GS External Links
New: Added a new incident field- CTM360 CyberBlindspot GS External Links that External links related to the gambling site finding.
New: CTM360 CyberBlindspot GS Internal Links
New: Added a new incident field- CTM360 CyberBlindspot GS Internal Links that Internal links related to the gambling site finding.

Incident Types

HackerView Incident
Updated the HackerView Incident incident type to use the new playbook "HackerView Incident Management V2".

Integrations

CTM360 CyberBlindspot

Added support for Social Media Fraud, Money Mules, and Gambling Sites modules via the Module To Use parameter.
Added timestamp normalization for ISO and numeric timestamp formats in fetch and incident mapping.
Unified incident fetch for XSOAR and XSIAM with numeric severity mapping.
Updated the Docker image to: demisto/python3:3.12.13.9059085.

CTM360 HackerView

Added support for Module To Use parameter that choose the module: light scan or deep scan.
Unified incident fetch for XSOAR and XSIAM with numeric severity mapping.
Updated the Docker image to: demisto/python3:3.12.13.9059085.

Mappers

CTM360-HackerView - Incoming Mapper

Updated the CTM360-HackerView - Incoming Mapper mapper to add the new incident fields.

CTM360-CyberBlindspot - Incoming Mapper

Updated the CTM360-CyberBlindspot - Incoming Mapper mapper to add incident fields for Social Media Fraud, Money Mules, and Gambling Sites modules.

Playbooks

New: HackerView Incident Management V2

This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation.

Related pull requests:
- 45143
- 44804

Download

2.3.4 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

2.3.3 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

2.3.2 - R5469292 (October 20, 2025)

Integrations

CTM360 CyberBlindspot

Updated the CTM360_CyberBlindspot integration to return the brand field in the incident details.

Related pull requests:
- 41396
- 41403

Download

2.3.1 - 4770511 (September 4, 2025)

Integrations

CTM360 HackerView

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

2.3.0 - 4246904 (July 21, 2025)

Incident Fields

New: CTM360 CyberBlindspot CC CVV
Added a new incident field- CTM360 CyberBlindspot CC CVV The compromised card's Card Verification Value (CVV).
New: CTM360 CyberBlindspot Risks
Added a new incident field- CTM360 CyberBlindspot Risks Risks associated with the incident.
New: CTM360 CyberBlindspot ML Computer Name
Added a new incident field- CTM360 CyberBlindspot ML Computer Name The name of the computer that was compromised.
New: CTM360 CyberBlindspot ML User
Added a new incident field- CTM360 CyberBlindspot ML User The user of the compromised account.
New: CTM360 CyberBlindspot Confirmation Time
Added a new incident field- CTM360 CyberBlindspot Confirmation Time The time the incident was confirmed.
New: CTM360 CyberBlindspot ML Hostname
Added a new incident field- CTM360 CyberBlindspot ML Hostname The hostname of the compromised device.
New: CTM360 CyberBlindspot BC Username
Added a new incident field- CTM360 CyberBlindspot BC Username The username related to the breach.
New: CTM360 CyberBlindspot ML Source URI
Added a new incident field- CTM360 CyberBlindspot ML Source URI The source URI of the malware.
New: CTM360 CyberBlindspot Timestamp
Added a new incident field- CTM360 CyberBlindspot Timestamp The timestamp of the incident.
New: CTM360 CyberBlindspot ML Stealer Family
Added a new incident field- CTM360 CyberBlindspot ML Stealer Family The family of the malware.
New: CTM360 CyberBlindspot CC Expiry Year
Added a new incident field- CTM360 CyberBlindspot CC Expiry Year The compromised card's expiry year.
New: CTM360 CyberBlindspot ML URL Path
Added a new incident field- CTM360 CyberBlindspot ML URL Path The path of the URL.
New: CTM360 CyberBlindspot Subject
Added a new incident field- CTM360 CyberBlindspot Subject The subject of the incident.
New: CTM360 CyberBlindspot ML Website
Added a new incident field- CTM360 CyberBlindspot ML Website The website of the malware.
New: CTM360 CyberBlindspot Ticket ID
Added a new incident field- CTM360 CyberBlindspot Ticket ID The ticket ID of the incident.
New: CTM360 CyberBlindspot ML Software
Added a new incident field- CTM360 CyberBlindspot ML Software The software that was compromised.
New: CTM360 CyberBlindspot Screenshots
Added a new incident field- CTM360 CyberBlindspot Screenshots The screenshot evidence files associated with the incident.
New: CTM360 CyberBlindspot BC Breach Source
Added a new incident field- CTM360 CyberBlindspot BC Breach Source The source of the breach.
New: CTM360 CyberBlindspot Incident Type
Added a new incident field- CTM360 CyberBlindspot Incident Type The type of the incident.
New: CTM360 CyberBlindspot ML Sources
Added a new incident field- CTM360 CyberBlindspot ML Sources The sources of the malware.
New: CTM360 CyberBlindspot Last Seen
Added a new incident field- CTM360 CyberBlindspot Last Seen The last time the incident was seen.
New: CTM360 CyberBlindspot ML Operating System
Added a new incident field- CTM360 CyberBlindspot ML Operating System The operating system of the compromised device.
New: CTM360 CyberBlindspot ML Date Compromised
Added a new incident field- CTM360 CyberBlindspot ML Date Compromised The date of the compromise.
New: CTM360 CyberBlindspot ML Malware Path
Added a new incident field- CTM360 CyberBlindspot ML Malware Path The path in which the malware was installed on the compromised device.
New: CTM360 CyberBlindspot ML Masked Password
Added a new incident field- CTM360 CyberBlindspot ML Masked Password The masked password of the compromised account.
New: CTM360 CyberBlindspot Severity
Added a new incident field- CTM360 CyberBlindspot Severity The severity of the incident.
New: CTM360 CyberBlindspot ML User Domain
Added a new incident field- CTM360 CyberBlindspot ML User Domain The domain of the compromised user.
New: CTM360 CyberBlindspot BC Domain
Added a new incident field- CTM360 CyberBlindspot BC Domain The domain related to the breach.
New: CTM360 CyberBlindspot CC Expiry Month
Added a new incident field- CTM360 CyberBlindspot CC Expiry Month The compromised card's expiry month.
New: CTM360 CyberBlindspot Remarks
Added a new incident field- CTM360 CyberBlindspot Remarks Remarks concerning the incident.
New: CTM360 CyberBlindspot BC Email
Added a new incident field- CTM360 CyberBlindspot BC Email The email related to the breach.
New: CTM360 CyberBlindspot Class
Added a new incident field- CTM360 CyberBlindspot Class The class of the incident.
New: CTM360 CyberBlindspot Status
Added a new incident field- CTM360 CyberBlindspot Status The status of the incident.
New: CTM360 CyberBlindspot BC Executive Name
Added a new incident field- CTM360 CyberBlindspot BC Executive Name The name of the executive related to the breach.
New: CTM360 CyberBlindspot ML Domain
Added a new incident field- CTM360 CyberBlindspot ML Domain The domain related to the compromised device.
New: CTM360 CyberBlindspot First Seen
Added a new incident field- CTM360 CyberBlindspot First Seen The first time the incident was seen.
New: CTM360 CyberBlindspot ML Password
Added a new incident field- CTM360 CyberBlindspot ML Password The password of the compromised account.
New: CTM360 CyberBlindspot BC Password
Added a new incident field- CTM360 CyberBlindspot BC Password The password related to the breach.
New: CTM360 CyberBlindspot Brand
Added a new incident field- CTM360 CyberBlindspot Brand The brand related to the incident.
New: CTM360 CyberBlindspot CC Card Number
Added a new incident field- CTM360 CyberBlindspot CC Card Number The compromised card's number.

Integrations

CTM360 CyberBlindspot

Updated the CTM360_CyberBlindspot integration to support the Malware Logs module.
Updated the Docker image to: demisto/python3:3.12.11.4095827.

Mappers

CTM360-CyberBlindspot - Incoming Mapper

Updated the CTM360-CyberBlindspot - Incoming Mapper to support the new incident fields.

Related pull requests:
- 40566
- 40644

Download

2.2.1 - R3980324 (June 26, 2025)

Integrations

CTM360 HackerView

Documentation and metadata improvements.

CTM360 CyberBlindspot

Documentation and metadata improvements.

Related pull requests:
- 40195

Download

2.3.5 - 11215107 (July 21, 2026)

Incident Fields

New: CTM360 HackerView DS CVSS Score
New: Added a new incident field- CTM360 HackerView DS CVSS Score that CVSS base score for the vulnerability.
New: CTM360 HackerView DS CVSS Metrics
New: Added a new incident field- CTM360 HackerView DS CVSS Metrics that CVSS vector or metric string.
New: CTM360 HackerView DS Asset
New: Added a new incident field- CTM360 HackerView DS Asset that Affected asset (e.g. host:port).
New: CTM360 HackerView DS Issue Description
New: Added a new incident field- CTM360 HackerView DS Issue Description that Detailed description of the issue.
New: CTM360 HackerView DS URI
New: Added a new incident field- CTM360 HackerView DS URI that URI path or resource related to the finding.
New: CTM360 HackerView DS Port
New: Added a new incident field- CTM360 HackerView DS Port that Network port associated with the finding.
New: CTM360 HackerView DS Known Exploited
New: Added a new incident field- CTM360 HackerView DS Known Exploited that Whether the vulnerability is known to be exploited.
New: CTM360 HackerView Brand
New: Added a new incident field- CTM360 HackerView Brand that The organization brand the incident belongs to.
New: CTM360 HackerView DS Ticket ID
New: Added a new incident field- CTM360 HackerView DS Ticket ID that HackerView ticket identifier (e.g. HVI-…).
New: CTM360 HackerView DS Evidence Response
New: Added a new incident field- CTM360 HackerView DS Evidence Response that HTTP response evidence for the finding.
New: CTM360 HackerView DS URL
New: Added a new incident field- CTM360 HackerView DS URL that Base URL of the affected asset or service.
New: CTM360 HackerView DS Evidence cURL Command
New: Added a new incident field- CTM360 HackerView DS Evidence cURL Command that cURL command to reproduce the finding.
New: CTM360 HackerView DS CPE
New: Added a new incident field- CTM360 HackerView DS CPE that Common Platform Enumeration (CPE) identifier.
New: CTM360 HackerView DS Issue Type
New: Added a new incident field- CTM360 HackerView DS Issue Type that Type or classification of the issue.
New: CTM360 HackerView Scan Type
New: Added a new incident field- CTM360 HackerView Scan Type that Scan type of the incident.
New: CTM360 HackerView DS Evidence Request
New: Added a new incident field- CTM360 HackerView DS Evidence Request that HTTP request evidence for the finding.
New: CTM360 HackerView DS EPSS Score
New: Added a new incident field- CTM360 HackerView DS EPSS Score that Exploit Prediction Scoring System (EPSS) score.
New: CTM360 HackerView DS Progress Status
New: Added a new incident field- CTM360 HackerView DS Progress Status that Progress of incident response on the platform.
New: CTM360 HackerView DS Domain
New: Added a new incident field- CTM360 HackerView DS Domain that Domain associated with the asset.
New: CTM360 HackerView DS IP
New: Added a new incident field- CTM360 HackerView DS IP that IP address associated with the finding.
New: CTM360 CyberBlindspot Incident Status
New: Added a new incident field- CTM360 CyberBlindspot Incident Status that Status of the incident on the platform.
New: CTM360 CyberBlindspot SMF Platform
New: Added a new incident field- CTM360 CyberBlindspot SMF Platform that Social media platform associated with the fraud finding.
New: CTM360 CyberBlindspot SMF Risk Score
New: Added a new incident field- CTM360 CyberBlindspot SMF Risk Score that Risk score for the social media fraud finding.
New: CTM360 CyberBlindspot MM Money Mule ID
New: Added a new incident field- CTM360 CyberBlindspot MM Money Mule ID that Unique identifier for the money mule record.
New: CTM360 CyberBlindspot MM Account Identifier
New: Added a new incident field- CTM360 CyberBlindspot MM Account Identifier that Account identifier associated with the money mule.
New: CTM360 CyberBlindspot MM BIC
New: Added a new incident field- CTM360 CyberBlindspot MM BIC that Bank Identifier Code (BIC) for the money mule account.
New: CTM360 CyberBlindspot MM Bank Name
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Name that Name of the bank associated with the money mule.
New: CTM360 CyberBlindspot MM Bank Account Holder Name
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Account Holder Name that Name of the bank account holder.
New: CTM360 CyberBlindspot MM Bank Account Country
New: Added a new incident field- CTM360 CyberBlindspot MM Bank Account Country that Country of the bank account.
New: CTM360 CyberBlindspot MM Transfer Amount
New: Added a new incident field- CTM360 CyberBlindspot MM Transfer Amount that Transfer amount associated with the money mule.
New: CTM360 CyberBlindspot MM Transfer Currency
New: Added a new incident field- CTM360 CyberBlindspot MM Transfer Currency that Currency of the transfer.
New: CTM360 CyberBlindspot MM Suspect Names
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Names that Names of suspects linked to the money mule.
New: CTM360 CyberBlindspot MM Suspect Emails
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Emails that Email addresses of suspects linked to the money mule.
New: CTM360 CyberBlindspot MM Suspect Phones
New: Added a new incident field- CTM360 CyberBlindspot MM Suspect Phones that Phone numbers of suspects linked to the money mule.
New: CTM360 CyberBlindspot GS Finding ID
New: Added a new incident field- CTM360 CyberBlindspot GS Finding ID that Unique identifier for the gambling site finding.
New: CTM360 CyberBlindspot GS Title
New: Added a new incident field- CTM360 CyberBlindspot GS Title that Title of the gambling site finding.
New: CTM360 CyberBlindspot GS URL
New: Added a new incident field- CTM360 CyberBlindspot GS URL that URL of the gambling site.
New: CTM360 CyberBlindspot GS Submitted URL
New: Added a new incident field- CTM360 CyberBlindspot GS Submitted URL that URL submitted for scanning.
New: CTM360 CyberBlindspot GS Landing URL
New: Added a new incident field- CTM360 CyberBlindspot GS Landing URL that Landing URL reached after redirection.
New: CTM360 CyberBlindspot GS URL Status
New: Added a new incident field- CTM360 CyberBlindspot GS URL Status that Status of the gambling site URL.
New: CTM360 CyberBlindspot GS Scan Status
New: Added a new incident field- CTM360 CyberBlindspot GS Scan Status that Scan status of the gambling site finding.
New: CTM360 CyberBlindspot GS Status Code
New: Added a new incident field- CTM360 CyberBlindspot GS Status Code that HTTP status code for the gambling site URL.
New: CTM360 CyberBlindspot GS Resolving IP
New: Added a new incident field- CTM360 CyberBlindspot GS Resolving IP that IP address the gambling site URL resolves to.
New: CTM360 CyberBlindspot GS Tags
New: Added a new incident field- CTM360 CyberBlindspot GS Tags that Tags associated with the gambling site finding.
New: CTM360 CyberBlindspot GS Enrichment
New: Added a new incident field- CTM360 CyberBlindspot GS Enrichment that Enrichment data for the gambling site finding.
New: CTM360 CyberBlindspot GS External Links
New: Added a new incident field- CTM360 CyberBlindspot GS External Links that External links related to the gambling site finding.
New: CTM360 CyberBlindspot GS Internal Links
New: Added a new incident field- CTM360 CyberBlindspot GS Internal Links that Internal links related to the gambling site finding.

Incident Types

HackerView Incident
Updated the HackerView Incident incident type to use the new playbook "HackerView Incident Management V2".

Integrations

CTM360 CyberBlindspot

Added support for Social Media Fraud, Money Mules, and Gambling Sites modules via the Module To Use parameter.
Added timestamp normalization for ISO and numeric timestamp formats in fetch and incident mapping.
Unified incident fetch for XSOAR and XSIAM with numeric severity mapping.
Updated the Docker image to: demisto/python3:3.12.13.9059085.

CTM360 HackerView

Added support for Module To Use parameter that choose the module: light scan or deep scan.
Unified incident fetch for XSOAR and XSIAM with numeric severity mapping.
Updated the Docker image to: demisto/python3:3.12.13.9059085.

Mappers

CTM360-HackerView - Incoming Mapper

Updated the CTM360-HackerView - Incoming Mapper mapper to add the new incident fields.

CTM360-CyberBlindspot - Incoming Mapper

Updated the CTM360-CyberBlindspot - Incoming Mapper mapper to add incident fields for Social Media Fraud, Money Mules, and Gambling Sites modules.

Playbooks

New: HackerView Incident Management V2

This playbook runs the incidents through indicator enrichment, then based on the mirroring settings, it can communicate with the remote server to track the progress of the investigation.

Related pull requests:
- 45143
- 44804

Download

2.3.4 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

2.3.3 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

2.3.2 - R5469292 (October 20, 2025)

Integrations

CTM360 CyberBlindspot

Updated the CTM360_CyberBlindspot integration to return the brand field in the incident details.

Related pull requests:
- 41396
- 41403

Download

2.3.1 - 4761438 (September 4, 2025)

Integrations

CTM360 HackerView

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

2.3.0 - 4246904 (July 21, 2025)

Incident Fields

New: CTM360 CyberBlindspot CC CVV
Added a new incident field- CTM360 CyberBlindspot CC CVV The compromised card's Card Verification Value (CVV).
New: CTM360 CyberBlindspot Risks
Added a new incident field- CTM360 CyberBlindspot Risks Risks associated with the incident.
New: CTM360 CyberBlindspot ML Computer Name
Added a new incident field- CTM360 CyberBlindspot ML Computer Name The name of the computer that was compromised.
New: CTM360 CyberBlindspot ML User
Added a new incident field- CTM360 CyberBlindspot ML User The user of the compromised account.
New: CTM360 CyberBlindspot Confirmation Time
Added a new incident field- CTM360 CyberBlindspot Confirmation Time The time the incident was confirmed.
New: CTM360 CyberBlindspot ML Hostname
Added a new incident field- CTM360 CyberBlindspot ML Hostname The hostname of the compromised device.
New: CTM360 CyberBlindspot BC Username
Added a new incident field- CTM360 CyberBlindspot BC Username The username related to the breach.
New: CTM360 CyberBlindspot ML Source URI
Added a new incident field- CTM360 CyberBlindspot ML Source URI The source URI of the malware.
New: CTM360 CyberBlindspot Timestamp
Added a new incident field- CTM360 CyberBlindspot Timestamp The timestamp of the incident.
New: CTM360 CyberBlindspot ML Stealer Family
Added a new incident field- CTM360 CyberBlindspot ML Stealer Family The family of the malware.
New: CTM360 CyberBlindspot CC Expiry Year
Added a new incident field- CTM360 CyberBlindspot CC Expiry Year The compromised card's expiry year.
New: CTM360 CyberBlindspot ML URL Path
Added a new incident field- CTM360 CyberBlindspot ML URL Path The path of the URL.
New: CTM360 CyberBlindspot Subject
Added a new incident field- CTM360 CyberBlindspot Subject The subject of the incident.
New: CTM360 CyberBlindspot ML Website
Added a new incident field- CTM360 CyberBlindspot ML Website The website of the malware.
New: CTM360 CyberBlindspot Ticket ID
Added a new incident field- CTM360 CyberBlindspot Ticket ID The ticket ID of the incident.
New: CTM360 CyberBlindspot ML Software
Added a new incident field- CTM360 CyberBlindspot ML Software The software that was compromised.
New: CTM360 CyberBlindspot Screenshots
Added a new incident field- CTM360 CyberBlindspot Screenshots The screenshot evidence files associated with the incident.
New: CTM360 CyberBlindspot BC Breach Source
Added a new incident field- CTM360 CyberBlindspot BC Breach Source The source of the breach.
New: CTM360 CyberBlindspot Incident Type
Added a new incident field- CTM360 CyberBlindspot Incident Type The type of the incident.
New: CTM360 CyberBlindspot ML Sources
Added a new incident field- CTM360 CyberBlindspot ML Sources The sources of the malware.
New: CTM360 CyberBlindspot Last Seen
Added a new incident field- CTM360 CyberBlindspot Last Seen The last time the incident was seen.
New: CTM360 CyberBlindspot ML Operating System
Added a new incident field- CTM360 CyberBlindspot ML Operating System The operating system of the compromised device.
New: CTM360 CyberBlindspot ML Date Compromised
Added a new incident field- CTM360 CyberBlindspot ML Date Compromised The date of the compromise.
New: CTM360 CyberBlindspot ML Malware Path
Added a new incident field- CTM360 CyberBlindspot ML Malware Path The path in which the malware was installed on the compromised device.
New: CTM360 CyberBlindspot ML Masked Password
Added a new incident field- CTM360 CyberBlindspot ML Masked Password The masked password of the compromised account.
New: CTM360 CyberBlindspot Severity
Added a new incident field- CTM360 CyberBlindspot Severity The severity of the incident.
New: CTM360 CyberBlindspot ML User Domain
Added a new incident field- CTM360 CyberBlindspot ML User Domain The domain of the compromised user.
New: CTM360 CyberBlindspot BC Domain
Added a new incident field- CTM360 CyberBlindspot BC Domain The domain related to the breach.
New: CTM360 CyberBlindspot CC Expiry Month
Added a new incident field- CTM360 CyberBlindspot CC Expiry Month The compromised card's expiry month.
New: CTM360 CyberBlindspot Remarks
Added a new incident field- CTM360 CyberBlindspot Remarks Remarks concerning the incident.
New: CTM360 CyberBlindspot BC Email
Added a new incident field- CTM360 CyberBlindspot BC Email The email related to the breach.
New: CTM360 CyberBlindspot Class
Added a new incident field- CTM360 CyberBlindspot Class The class of the incident.
New: CTM360 CyberBlindspot Status
Added a new incident field- CTM360 CyberBlindspot Status The status of the incident.
New: CTM360 CyberBlindspot BC Executive Name
Added a new incident field- CTM360 CyberBlindspot BC Executive Name The name of the executive related to the breach.
New: CTM360 CyberBlindspot ML Domain
Added a new incident field- CTM360 CyberBlindspot ML Domain The domain related to the compromised device.
New: CTM360 CyberBlindspot First Seen
Added a new incident field- CTM360 CyberBlindspot First Seen The first time the incident was seen.
New: CTM360 CyberBlindspot ML Password
Added a new incident field- CTM360 CyberBlindspot ML Password The password of the compromised account.
New: CTM360 CyberBlindspot BC Password
Added a new incident field- CTM360 CyberBlindspot BC Password The password related to the breach.
New: CTM360 CyberBlindspot Brand
Added a new incident field- CTM360 CyberBlindspot Brand The brand related to the incident.
New: CTM360 CyberBlindspot CC Card Number
Added a new incident field- CTM360 CyberBlindspot CC Card Number The compromised card's number.

Integrations

CTM360 CyberBlindspot

Updated the CTM360_CyberBlindspot integration to support the Malware Logs module.
Updated the Docker image to: demisto/python3:3.12.11.4095827.

Mappers

CTM360-CyberBlindspot - Incoming Mapper

Updated the CTM360-CyberBlindspot - Incoming Mapper to support the new incident fields.

Related pull requests:
- 40566
- 40644

Download

2.2.1 - R3980324 (June 26, 2025)

Integrations

CTM360 HackerView

Documentation and metadata improvements.

CTM360 CyberBlindspot

Documentation and metadata improvements.

Related pull requests:
- 40195

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	February 5, 2024
Last Release	July 21, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.