The Cybereason Action enables users to set a custom, organization-specific reputation (whitelist or blacklist) for IoCs.

The integration provides the following action:

• Cybereason Set Reputation - set reputation for IoCs in the Cybereason platform.

The action is compatible with the following Indicator types:

• MD5
• FQDN
• IP Address
• SHA-1

Note:  This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature.