Dragos Platform

The Dragos Platform identifies ICS network assets, malicious activity, and provides guidance to investigate incidents.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. Host Name or IP Address (required) - The Host Name or IP Address of the Dragos Platform server.

2. API ID and API Secret (required) - An API for a user account that has the permissions to fetch assets. Refer to Dragos SiteStore API guide for Details of how to create these credentials.

3. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

4. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

5. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Parallel Requests Count (required, default: 5) - Specify the maximum number of parallel requests all connections for this adapter will create when connecting to the value supplied in Dragos Host Name or IP Address.
2. Fetch internal devices only - Select to only fetch devices where the internal flag is set to 'True'. Devices with a public IP address will not be fetched.
3. Fetch Vulnerabilities - When checked, the adapter will also fetch vulnerabilities. This requires "VulnerabilityDetectionRead" privilege from the API users