[app]
; specify file name for logging errors
logfile = ticura.log

; valid log levels are info, debug, warning, error
loglevel = Info

; old log lines will be dropped on application start up
logRetentionDays = 14

; additionally logging to console
logToConsole = false

[ticura]
; api key for your Ticura feed
apiKey = TICURA_API_KEY

; base url of Ticura API
baseUrl = https://api.ticura.io/v1

; enables job status reporting to Ticura
reportStatus = true

[crowdstrike]
; Client ID of your Crowdstrike Falcon tenant
clientID = CROWDSTRIKE_API_CLIENTID

; Client secret of your Crowdstrike Falcon tenant
clientSecret = CROWDSTRIKE_API_SECRET

; base url of Crowdstrike API
baseURL = CROWDSTRIKE_API_BASE_URL


; Worker Threats
workerThreads = 20

[indicators]
; host groups indicators are valid for
hostGroups =

;default action in case of indicator matches (prevent/prevent_no_ui/allow only applies to hashes)
;defaultAction = detect

; default mobile action in case of indicator matches
;defaultMobileAction = prevent

; platforms to be set on indicator uploads (no assignment of mobile platforms to hash iocs)
;defaultPlatforms = windows ,mac, linux, android, ios,

; sets the max severity level. IoC's above this level will be lowered to this level e.g Level is high max maxSeverity is set to medium the IoC will be added with severity medium
; levels are informational, low, medium, high, critical
maxSeverity = critical