Orchestration
...
Native Actions
Swimlane Intelligence Native Action
4 min
overview the swimlane intelligence native action queries the swimlane intelligence service, a repository of cybersecurity information today, the swimlane intelligence service consists of cve metadata and exploit information more data sources will be added in the future the action retrieves and returns detailed information about the specified cve, facilitating efficient vulnerability analysis key features cve search supports searching for a single cve using its unique id detailed output returns detailed information about the cve, including severity, description, and related metadata simple configuration easy to use inputs for quick cve lookups how to use open your playbook in the turbine canvas from the add panel, drag and drop the swimlane intelligence action into your canvas click on the action block to configure it provide a unique title and key for the action title the display name for the action (for example, get cve data) key a system generated unique identifier for the action (editable but must follow the naming convention alphanumeric and underscores only) configure inputs click configure to open the configuration panel select data category use the select data category dropdown to choose the type of data to query available options include vulnerability exploits provides exploit related information about the cve vulnerability metadata retrieves metadata and analysis from the national vulnerability database inputs section id type string description enter a single cve id (for example, cve 2023 12345) to retrieve details about the vulnerability input methods manual entry playbook property expression using dot notation apply configuration click apply to save your settings and activate the action within the workflow run the query execute the action to retrieve detailed information about the specified cve inputs id type string description the unique identifier for the cve to query this supports only a single id at a time outputs the action returns detailed information about the queried cve, which may include cve metadata severity score description of the vulnerability impact details affected systems references and links to additional information example use cases single cve query search for a specific cve (for example, cve 2023 12345) to gather details about its severity, impact, and mitigation