Mp/describe integration

content/response_integrations/google/cyber_x/resources/ai/integration_ai_description.yaml

@@ -0,0 +1,23 @@
+product_categories:
+  asset_inventory: true
+  cloud_security: false
+  collaboration: false
+  edr: false
+  email_security: false
+  iam_and_identity_management: false
+  itsm: false
+  network_security: false
+  reasoning: >-
+    The 'cyber_x' integration is an OT/ICS security platform focused on asset discovery
+    and monitoring. It qualifies for the SIEM category because it retrieves alerts
+    and events from the CyberX platform, providing visibility into security activity.
+    It qualifies for the Asset Inventory category as it performs asset discovery and
+    enriches entities with device metadata. It qualifies for the Vulnerability Management
+    category because it includes an action to retrieve device vulnerability reports
+    and CVE information. It does not qualify for EDR (no process-level activity),
+    Network Security (no blocking or firewall log retrieval), Threat Intelligence
+    (no reputation lookups), Email Security, IAM, Cloud Security, ITSM, or Collaboration,
+    as it lacks the specific functional requirements for those domains.
+  siem: true
+  threat_intelligence: false
+  vulnerability_management: true