A-ISAC
Updated 1 month ago
by
Sachit Soni
This document explains how to set up and use A-ISAC with TruSTAR Station.
The A-ISAC facilitates the sharing of timely and actionable information related to threats, vulnerabilities, incidents, potential protective measures and best practices. They foster cooperation and communication among members using a secure trusted network. The A-ISAC researches and analyzes information to validate accuracy and severity and recommend mitigation strategies.
- Source Type: Premium Intel
- Update Type: Feed-based
- Update Frequency: 15 minutes
- Time to Install: 10 minutes
Data Types
The integration pulls all observables supported by TruSTAR.
Requirements
- Subscription to A-ISAC
- A-ISAC Username
- A-ISAC Password
Getting Started
- Log into TruSTAR Station
- Click the Marketplace icon on the left side icon list.
- Click Closed Sources.
- Click Subscribe on the A-ISAC List box.
- Enter your A-ISAC Username and Password and click Save Credentials & Request Subscription.
TruSTAR will validate the integration within 48 hours and send an email when the integration has been enabled.
TruSTAR Report Mapping
Field | Explanation |
Report Title | Indicator + Observable Package → "AISAC-[STIX_Package.id]" Observable Package → "AISAC-Observable-[STIX_Package.id]" |
External ID | "[STIX_Package.id] → eg. edge:Package-XXXX8db2-98eb-47fd-a54a-XXXXXXX" |
Time Begun | "CreatedDate" - 2019-11-09T18:21:34.323Z |
Client Type | Python SDK |
Client Meta Tag | stash_aisac |
Known Issues
No reported issues.
