HackerOne | Marketplace

Details
Content
Dependencies
Version History

HackerOne is a vulnerability coordination and bug bounty platform that connects businesses with penetration testers and cyber-security researchers.

What does this pack do?

The content pack HackerOne provides the following capabilities:

Retrieve all of your program's vulnerability reports that meet certain filtering criteria.
Pulls vulnerability reports as incidents.
Receive a list of program objects to which you belong.
The layout displays report linkages such as reporter, assignee (a user or group), weakness, programme, and severity.

What does this pack do?

The content pack HackerOne provides the following capabilities:

Retrieve all of your program's vulnerability reports that meet certain filtering criteria.
Pulls vulnerability reports as incidents.
Receive a list of program objects to which you belong.
The layout displays report linkages such as reporter, assignee (a user or group), weakness, programme, and severity.

Classifiers

Name	Description
HackerOne - Incoming Mapper	Incoming mapper for HackerOne Report.

Incident Fields

Name	Description
HackerOne Report Assignee Username	The username of the assignee.
HackerOne Report Program Handle	The handle of the program.
HackerOne Report Assignee Name	The name of the assignee.
HackerOne Report Reporter Reputation	The reputation of the reporter.
HackerOne Report Assignee Website	The assignee's website, as provided by the assignee.
HackerOne Report Reporter Location	The reporter's location, as provided by the reporter.
HackerOne Report Vulnerable Component Scope	A CVSS metric that determines if a successful attack impacts a component other than the vulnerable component.
HackerOne Report Disclosed At	The date and time the report was disclosed. Formatted according to ISO 8601.
HackerOne Report Severity ID	The unique ID of the severity.
HackerOne Report Assignee HackerOne Triager	Indicates if the assignee is a hackerone triager.
HackerOne Report Assignee Location	The assignee's location, as provided by the assignee.
HackerOne Report Assignee Reputation	The reputation of the assignee.
HackerOne Report Reporter HackerOne Triager	Indicates if the reporter is a hackerone triager.
HackerOne Report Reporter Username	The username of the reporter.
HackerOne Report Reporter Disabled	Indicates if the reporter is disabled.
HackerOne Report Vulnerability Information	Detailed information about the vulnerability including the steps to reproduce as well as supporting material and references.
HackerOne Report Attack Complexity	A CVSS metric that describes the conditions beyond the attacker's control that must exist in order to exploit the vulnerability.
HackerOne Report Reporter Website	The reporter's website, as provided by the reporter.
HackerOne Report Weakness ID	The unique ID of the weakness.
HackerOne Report Assignee Disabled	Indicates if the assignee is disabled.
HackerOne Report Reporter ID	The unique ID of the reporter.
HackerOne Report Weakness Name	The name of the weakness.
HackerOne Report ID	The unique ID of the report.
HackerOne Report Attack Vector	A CVSS metric that reflects the context by which vulnerability exploitation is possible.
HackerOne Report Weakness External ID	The weakness' external reference to CWE or CAPEC.
HackerOne Report Assignee ID	The unique ID of the assignee.
HackerOne Report Reporter Name	The name of the reporter.

Incident Types

Name	Description
HackerOne Report

Integrations

Name	Description
HackerOne (Partner Contribution)	HackerOne integration allows users to fetch reports by using the fetch incidents capability. It also provides commands to retrieve all the reports and programs.

Layouts

Name	Description
HackerOne Report	HackerOne Report Layout

Classifiers

Name	Description
HackerOne - Incoming Mapper	Incoming mapper for HackerOne Report.

Incident Fields

Name	Description
HackerOne Report Assignee HackerOne Triager	Indicates if the assignee is a hackerone triager.
HackerOne Report Reporter HackerOne Triager	Indicates if the reporter is a hackerone triager.
HackerOne Report ID	The unique ID of the report.
HackerOne Report Assignee Username	The username of the assignee.
HackerOne Report Assignee Disabled	Indicates if the assignee is disabled.
HackerOne Report Reporter Website	The reporter's website, as provided by the reporter.
HackerOne Report Reporter Name	The name of the reporter.
HackerOne Report Weakness External ID	The weakness' external reference to CWE or CAPEC.
HackerOne Report Severity ID	The unique ID of the severity.
HackerOne Report Reporter Reputation	The reputation of the reporter.
HackerOne Report Reporter Disabled	Indicates if the reporter is disabled.
HackerOne Report Assignee ID	The unique ID of the assignee.
HackerOne Report Assignee Location	The assignee's location, as provided by the assignee.
HackerOne Report Disclosed At	The date and time the report was disclosed. Formatted according to ISO 8601.
HackerOne Report Reporter Username	The username of the reporter.
HackerOne Report Attack Complexity	A CVSS metric that describes the conditions beyond the attacker's control that must exist in order to exploit the vulnerability.
HackerOne Report Vulnerable Component Scope	A CVSS metric that determines if a successful attack impacts a component other than the vulnerable component.
HackerOne Report Reporter ID	The unique ID of the reporter.
HackerOne Report Weakness Name	The name of the weakness.
HackerOne Report Attack Vector	A CVSS metric that reflects the context by which vulnerability exploitation is possible.
HackerOne Report Weakness ID	The unique ID of the weakness.
HackerOne Report Assignee Reputation	The reputation of the assignee.
HackerOne Report Assignee Name	The name of the assignee.
HackerOne Report Assignee Website	The assignee's website, as provided by the assignee.
HackerOne Report Reporter Location	The reporter's location, as provided by the reporter.
HackerOne Report Program Handle	The handle of the program.
HackerOne Report Vulnerability Information	Detailed information about the vulnerability including the steps to reproduce as well as supporting material and references.

Incident Types

Name	Description
HackerOne Report

Integrations

Name	Description
HackerOne (Partner Contribution)	HackerOne integration allows users to fetch reports by using the fetch incidents capability. It also provides commands to retrieve all the reports and programs.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	November 18, 2021
Last Release	December 4, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.