diff --git a/docs/api/aws-region-by-deployment.md b/docs/api/aws-region-by-deployment.md index 05521cb5d2..e85fd648e6 100644 --- a/docs/api/aws-region-by-deployment.md +++ b/docs/api/aws-region-by-deployment.md @@ -5,6 +5,6 @@ sidebar_label: AWS Regions by Deployment description: This guide contains information about API authentication and the Sumo Logic endpoints to use for your API client. --- -import AwsRegion from '../reuse/aws-region-by-sumo-deployment.md'; +import AWSDeploymentRegion from '../reuse/aws-region-by-sumo-deployment.md'; - +* diff --git a/docs/api/getting-started.md b/docs/api/getting-started.md index bd75c1cb44..6eb40fb68f 100644 --- a/docs/api/getting-started.md +++ b/docs/api/getting-started.md @@ -132,9 +132,9 @@ Sumo Logic's FedRAMP deployment is similar to our other deployments, such as US2 ### AWS region by Sumo Logic deployment -import AwsRegion from '../reuse/aws-region-by-sumo-deployment.md'; +import AWSDeploymentRegion from '../reuse/aws-region-by-sumo-deployment.md'; - +* ## Status codes diff --git a/docs/platform-services/automation-service/app-central/integrations/abnormal-security.md b/docs/platform-services/automation-service/app-central/integrations/abnormal-security.md index ce6566df40..1897886f09 100644 --- a/docs/platform-services/automation-service/app-central/integrations/abnormal-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/abnormal-security.md @@ -28,12 +28,24 @@ Abnormal Security provides advanced email security to prevent credential phishin ## Configure Abnormal Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. The name for the resource. - * **URL API**. Abnormal Security URL API. Default: 'https://api.abnormalplatform.com' - * **Token**. Retrieved from Abnormal Security.
Abnormal Security configuration +* +* **URL API**. Enter your [Abnormal Security API](https://abnormalsecurity.my.site.com/knowledgebase/s/article/Abnormal-REST-API-Integration) URL. The default is `https://api.abnormalplatform.com` + +* **Token**. Enter your [token](https://abnormalsecurity.my.site.com/knowledgebase/s/article/Abnormal-REST-API-Integration) retrieved from Abnormal Security. +* +* +* +* + +Abnormal Security configuration For information about Abnormal Security, see [Abnormal Security documentation](https://abnormalsecurity.my.site.com/knowledgebase/s/). diff --git a/docs/platform-services/automation-service/app-central/integrations/abuse.ch-sslbl-feed.md b/docs/platform-services/automation-service/app-central/integrations/abuse.ch-sslbl-feed.md index 52b0594db2..b0af278285 100644 --- a/docs/platform-services/automation-service/app-central/integrations/abuse.ch-sslbl-feed.md +++ b/docs/platform-services/automation-service/app-central/integrations/abuse.ch-sslbl-feed.md @@ -25,9 +25,20 @@ An SSL certificate can be associated with one or more servers (IP address:port c ## Configure Abuse.ch SSLBL Feed in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* +* +* +* + Abuse.ch SSLBL configuration For information about Abuse.ch SSLBL, see [Abuse.ch SSLBL documentation](https://sslbl.abuse.ch/). diff --git a/docs/platform-services/automation-service/app-central/integrations/abuseipdb.md b/docs/platform-services/automation-service/app-central/integrations/abuseipdb.md index c231a4009e..d5e6ac3be9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/abuseipdb.md +++ b/docs/platform-services/automation-service/app-central/integrations/abuseipdb.md @@ -32,12 +32,24 @@ Enrich IP addresses with reputation information gathered from AbuseIPDB. ## Configure AbuseIPDB in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. Enter a name for the resource. - * **API URL**. Enter `https://api.abuseipdb.com` - * **API Key**. Enter the API key you copied earlier.
any.run-3 +* +* **API URL**. Enter `https://api.abuseipdb.com` + +* **API Key**. Enter the [API key](https://www.abuseipdb.com/api.html) you copied [above](#create-an-api-key). +* +* +* +* + +any.run-3 For information about AbuseIPDB, see [AbuseIPDB documentation](https://www.abuseipdb.com/api.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/acronis.md b/docs/platform-services/automation-service/app-central/integrations/acronis.md index 0101879b8b..870b6398d3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/acronis.md +++ b/docs/platform-services/automation-service/app-central/integrations/acronis.md @@ -17,7 +17,7 @@ Acronis develops on-premises and cloud software with integration of backup, disa ## Acronis configuration -Follow these steps to get your API key from Arconis. +Follow these steps to get your [API key](https://developer.acronis.com/doc/connector/authentication/index.html) from Arconis. 1. Select **Manage account** from the dashboard.
acronis-1 1. From the **SETTINGS** select **API clients**.
acronis-2 @@ -27,13 +27,26 @@ Follow these steps to get your API key from Arconis. ## Configure Acronis in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. The desired name for the resource. - * **URL**. Your Acronis Data Center URL you copied earlier from Acronis. Default: 'https://cloud.acronis.com'/ . - * **Client ID**. Your Acronis Client ID you copied earlier from Acronis. - * **Client Secret**. Your Acronis Secret you copied earlier from Acronis.
Acronis configuration +* +* **URL**. Enter the Acronis Data Center URL you copied [above](#acronis-configuration). The default is `https://cloud.acronis.com`. + +* **Client ID**. Enter the Acronis Client ID you copied above. + +* **Client Secret**. The the Acronis Secret you copied above. +* +* +* +* + +Acronis configuration For information about Acronis, see [Acronis documentation](https://developer.acronis.com/doc/). diff --git a/docs/platform-services/automation-service/app-central/integrations/active-directory-v2.md b/docs/platform-services/automation-service/app-central/integrations/active-directory-v2.md index 69114ae85d..7ca80bef0c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/active-directory-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/active-directory-v2.md @@ -79,13 +79,43 @@ If an existing Windows Server is not available, follow these steps to set up a n ## Configure Active Directory V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Host**. The hostname or IP address of the AD server. - * **Login Port**. The port used for LDAP authentication (the default is `389` for LDAP and `636` for LDAPS). - * **Login DN (Distinguished Name)**. Enter the distinguished name format (for example, `CN=Administrator,CN=Users,DC=csoar,DC=com`). See the following sections for information about how to get the login DN. - * **Password**. The corresponding password for the provided username.
Active Directory V2 configuration +* +* **Host**. The hostname or IP address of the AD server. + +* **Login Port**. The port used for LDAP authentication. The default is `389` for LDAP and `636` for LDAPS. + +* **Login DN (Distinguished Name)**. Enter the distinguished name format (for example, `CN=Administrator,CN=Users,DC=csoar,DC=com`). See the [following sections](#how-to-get-login-dn-with-a-local-account) for information about how to get the login DN. + +* **Password**. The corresponding password for the provided username. + +* **Connection Security**. Select the type of security to use for communication (**SSL**, **NonSSL**, **StartTLS**, or **LDAP over TLS**). + +* **CA Certificate Format**. Select the format (**PFX, P12** or **PEM**). + +* **CA Certificate**. Enter the certificate. Only required if you selected **LDAP over TLS**. The certificate must be in Base64 encoded format. + +* **Certificate Passphrase**. Enter the passphrase. Only required if you selected the **PFX, P12** certificate format. + +* **Base DN**. Enter the Base Distinguished Name. + +* **Global Catalog or DN Port**. Select the catalog or port. For global catalog, select port 3268 for LDAP or 3269 for secure LDAP. + +* +* **Docker Hostnames**. Enter the container's hostname. + +* +* +* + +Active Directory V2 configuration For information about Microsoft Entra Connect V2 (formerly Active Directory V2), see [Microsoft Entra Connect V2 documentation](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-azure-ad-connect-v2). diff --git a/docs/platform-services/automation-service/app-central/integrations/active-directory.md b/docs/platform-services/automation-service/app-central/integrations/active-directory.md index 38bdf44b8e..220d7715f5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/active-directory.md +++ b/docs/platform-services/automation-service/app-central/integrations/active-directory.md @@ -37,9 +37,27 @@ Utilize user, group, and system information from Active Directory. ## Configure Active Directory in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. The hostname or IP address of the AD server. + +* **Login Port**. The port used for LDAP authentication. The default is `389` for LDAP and `636` for LDAPS. + +* **Login DN (Username)**. Enter the distinguished name format (for example, `CN=Administrator,CN=Users,DC=csoar,DC=com`). See the following sections for information about how to get the login DN. + +* **Password**. The corresponding password for the provided username. + +* **Base DN**. Enter the Base Distinguished Name. + +* **Global Catalog or DN Port**. Select the catalog or port. For global catalog, select port 3268 for LDAP or 3269 for secure LDAP. + Active Directory configuration For information about Active Directory, see [Active Directory documentation](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/active-directory-overview). diff --git a/docs/platform-services/automation-service/app-central/integrations/airtable.md b/docs/platform-services/automation-service/app-central/integrations/airtable.md index f7edd08f42..bbd7fef744 100644 --- a/docs/platform-services/automation-service/app-central/integrations/airtable.md +++ b/docs/platform-services/automation-service/app-central/integrations/airtable.md @@ -22,16 +22,31 @@ Updated: Jul 18, 2023** ## Airtable configuration 1. Sign in to the Airtable platform with your email ID and password.
airtable-1 -1. Create your token, refer to the [Developer hub page](https://airtable.com/developers/web/guides/personal-access-tokens). +1. To create your token, refer to the [Airtable documentation](https://airtable.com/developers/web/guides/personal-access-tokens). ## Configure Airtable in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * URL: default value for API URL is 'https://api.airtable.com' - * Token : the Token you copied earlier.
Airtable configuration +* +* **URL**. Enter the Airtable API URL. The default value is `https://api.airtable.com` + +* **Token**. Enter the token you copied [above](#airtable-configuration). +* +* +* +* + + + +Airtable configuration For information about Airtable, see [Airtable documentation](https://support.airtable.com/docs). diff --git a/docs/platform-services/automation-service/app-central/integrations/akenza.md b/docs/platform-services/automation-service/app-central/integrations/akenza.md index 303e8108e4..27ee6d502f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/akenza.md +++ b/docs/platform-services/automation-service/app-central/integrations/akenza.md @@ -28,16 +28,29 @@ Updated: Jul 18, 2023*** ## Akenza configuration 1. Log in to the Akenza platform with your email and password and follow the link for configuration. -1. Create API key from GUI of Akenza by locating to API key and by clicking on the button Generate API Key.
akenza-1 +1. Create an [API key](https://docs.akenza.io/akenza.io/get-started/reference/api-documentation#api-keys) in the Akenza UI by locating an API key and clicking on the button **Generate API Key**.
akenza-1 ## Configure Akenza in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **URL**. Default value for API URL is 'https://api.akenza.io' - * **Api Key**. The API Key you created earlier.
Akenza configuration +* +* **URL**. Enter the Akenza API URL. The default value is `https://api.akenza.io` + +* **API Key**. Enter the API key you created [above](#akenza-configuration). +* +* +* +* + +Akenza configuration For information about Akenza, see [Akenza documentation](https://docs.akenza.io/akenza.io/get-started/reference/api-documentation). diff --git a/docs/platform-services/automation-service/app-central/integrations/alienvault-otx.md b/docs/platform-services/automation-service/app-central/integrations/alienvault-otx.md index e48a4c6048..cbf3c80b38 100644 --- a/docs/platform-services/automation-service/app-central/integrations/alienvault-otx.md +++ b/docs/platform-services/automation-service/app-central/integrations/alienvault-otx.md @@ -37,9 +37,21 @@ Threat Intelligence-Reputation ## Configure AlienVault in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your AlienVault OTX API URL. The default value is `https://otx.alienvault.com` + +* **API Key**. Enter your [AlienVault OTX API key](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/otx/otx-key.htm). +* +* + Alienvault OTX configuration For information about AlienVault, see [AlienVault documentation](https://cybersecurity.att.com/documentation/). diff --git a/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-anywhere.md b/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-anywhere.md index 903aa11d53..846154d697 100644 --- a/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-anywhere.md +++ b/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-anywhere.md @@ -27,9 +27,26 @@ Search events, alarms, and update labels in AlienVault USM Anywhere. ## Configure AlienVault USM Anywhere in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your AlienVault USM Anywhere URL, for example, `https://example.alienvault.cloud/` + +* **Client ID**. Enter your [AlienVault USM Anywhere Client ID](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/user-management/api-clients.htm). + +* **Client Secret**. Enter the secret for the client ID. + +* +* +* +* + Alienvault USM Anywhere configuration For information about AlienVault USM Anywhere, see [AlienVault USM Anywhere documentation](https://cybersecurity.att.com/documentation/usm-anywhere.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-central.md b/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-central.md index 790b9ec024..729b01eceb 100644 --- a/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-central.md +++ b/docs/platform-services/automation-service/app-central/integrations/alienvault-usm-central.md @@ -21,9 +21,25 @@ Search events, alarms, and update labels in AlienVault USM Central. ## Configure AlienVault USM Central in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your AlienVault USM Central URL, for example, `https://example.alienvault.cloud/` + +* **Username**. Enter the username of the AlienVault USM Central admin user authorized to provide authentication for the integration. + +* **Password**. Enter the username's password. +* +* +* +* + Alienvault USM Central configuration For information about AlienVault USM Central, see [AlienVault USM Central documentation](https://cybersecurity.att.com/documentation/usm-central.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/alleantia.md b/docs/platform-services/automation-service/app-central/integrations/alleantia.md index 38e2f0ce81..3413db4f8b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/alleantia.md +++ b/docs/platform-services/automation-service/app-central/integrations/alleantia.md @@ -28,9 +28,23 @@ Alleantia software is a reference vendor for factory automation, energy and util ## Configure Alleantia in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Alleantia server URL. + +* **Port**. Enter the Allentia server port. +* +* +* +* + Alleantia configuration For information about Alleantia, see [Alleantia documentation](https://kb.alleantia.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/alphamountain.md b/docs/platform-services/automation-service/app-central/integrations/alphamountain.md index 16b26f290c..0bcb26d22a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/alphamountain.md +++ b/docs/platform-services/automation-service/app-central/integrations/alphamountain.md @@ -26,11 +26,24 @@ In order to get a free trial please visit [https://www.alphamountain.ai/contact/ ## Configure alphaMountain in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **URL**. alphaMountain API URL. Default: 'https://api.alphamountain.ai' - * **License Key**. Your License Key for alphaMountain.
alphaMountain configuration +* +* **URL**. Enter the alphaMountain API URL. The default value is `https://api.alphamountain.ai` + +* **License Key**. Enter your License Key for alphaMountain. +* +* +* +* + +alphaMountain configuration For information about alphaMountain, see [alphaMountain documentation](https://www.alphamountain.ai/api/). diff --git a/docs/platform-services/automation-service/app-central/integrations/anomali-threatstream.md b/docs/platform-services/automation-service/app-central/integrations/anomali-threatstream.md index 47f1656748..7d537ab7f0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/anomali-threatstream.md +++ b/docs/platform-services/automation-service/app-central/integrations/anomali-threatstream.md @@ -18,9 +18,25 @@ Anomali ThreatStream (previously known as ThreatStream Optic) is Threat Intellig ## Configure Anomali ThreatStream in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the Anomali ThreatStream API URL. The default value is `https://api.threatstream.com` + +* **Username**. Enter the username of the Anomali ThreatStream admin user authorized to provide authentication for the integration. + +* **API Key**. Enter an Anomali ThreatStream API key. +* +* +* +* + Anomali configuration For information about Anomali ThreatStream, see [Anomali documentation](https://www.anomali.com/resources). diff --git a/docs/platform-services/automation-service/app-central/integrations/any.run.md b/docs/platform-services/automation-service/app-central/integrations/any.run.md index e0edc6307c..cec7ebd74e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/any.run.md +++ b/docs/platform-services/automation-service/app-central/integrations/any.run.md @@ -24,13 +24,26 @@ Sign in to ANY.RUN. Click on your profile on the left menu. In the API and Limit ## Configure ANY.RUN in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **URL**. 'https://api.any.run' - * **API Key**. The API Key you copied earlier.
ANY.RUN configuration +* +* **URL**. Enter the ANY.RUN URL. The default value is `https://api.any.run` - For information about ANY.RUN, see [ANY.RUN documentation](https://any.run/cybersecurity-blog/ti-feeds-integration/). +* **API Key**. Enter the API key you copied [above](#anyrun-configuration). +* +* +* +* + +ANY.RUN configuration + +For information about ANY.RUN, see [ANY.RUN documentation](https://any.run/cybersecurity-blog/ti-feeds-integration/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/apivoid.md b/docs/platform-services/automation-service/app-central/integrations/apivoid.md index 26181a06d2..a083072425 100644 --- a/docs/platform-services/automation-service/app-central/integrations/apivoid.md +++ b/docs/platform-services/automation-service/app-central/integrations/apivoid.md @@ -26,8 +26,27 @@ Utilize APIVOID to gather enrichment data during incident investigations. ## Configure APIVoid in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter the APIVoid API URL. The default value is `https://endpoint.apivoid.com/` + +* **API Key**. Enter your APIVoid API key. +* +* +* +* +* +* +* APIVoid configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/arbor.md b/docs/platform-services/automation-service/app-central/integrations/arbor.md index e7c3351a51..cf548761fc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/arbor.md +++ b/docs/platform-services/automation-service/app-central/integrations/arbor.md @@ -23,8 +23,21 @@ Gather detail-rich data from Netscout Arbor alerts. ## Configure Arbor in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Arbor API URL. + +* **API Key**. Enter your Arbor API key. +* +* +* +* Arbor configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/arcanna.md b/docs/platform-services/automation-service/app-central/integrations/arcanna.md index c9d65ef554..7019246418 100644 --- a/docs/platform-services/automation-service/app-central/integrations/arcanna.md +++ b/docs/platform-services/automation-service/app-central/integrations/arcanna.md @@ -21,19 +21,30 @@ Arcanna enables experts to train context-aware AI models which encompass their k ## Arcanna Elements configuration -Log in to Arcanna platform using your credentials login on Arcanna AI using [this](https://elements.withsecure.com/) url. +Log in to Arcanna platform using your credentials login on Arcanna AI using [this](https://elements.withsecure.com/) URL. ## Configure Arcanna in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the base API URL for Arcanna. - * **Label**. The name for the resource. - * **URL**. The base API URL for Arcanna. - * **Api Key**. Previously created Api Key.
Arcanna configuration +* **API Key**. Enter your [Arcanna API key](https://docs.arcanna.ai/docs/user-guide/create-api-key/). +* +* +* +* -For information about Arcanna, see [Arcanna documentation](https://docs.arcanna.ai/docs/user-guide/create-api-key). +Arcanna configuration + +For information about Arcanna, see [Arcanna documentation](https://docs.arcanna.ai/docs/introduction/introduction-to-arcanna). ## Category diff --git a/docs/platform-services/automation-service/app-central/integrations/arcsight-esm.md b/docs/platform-services/automation-service/app-central/integrations/arcsight-esm.md index 18d92aba18..b324ea0a18 100644 --- a/docs/platform-services/automation-service/app-central/integrations/arcsight-esm.md +++ b/docs/platform-services/automation-service/app-central/integrations/arcsight-esm.md @@ -30,8 +30,21 @@ Work with cases and active lists in Micro Focus ArcSight ESM. ## Configure ArcSight ESM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server url**. Enter the ArcSight ESM server URL. + +* **Username**. Enter the username of the ArcSight ESM admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the ArcSight ESM admin user. +* +* Arcsight ESM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/arcsight-logger.md b/docs/platform-services/automation-service/app-central/integrations/arcsight-logger.md index 57aa8e815b..1a2ad359f3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/arcsight-logger.md +++ b/docs/platform-services/automation-service/app-central/integrations/arcsight-logger.md @@ -18,8 +18,21 @@ Query events in Micro Focus ArcSight Logger. ## Configure ArcSight Logger in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server url**. Enter the ArcSight Logger server URL. + +* **Username**. Enter the username of the ArcSight Logger admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the ArcSight Logger admin user. +* +* ArcSight Logger configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/armorblox.md b/docs/platform-services/automation-service/app-central/integrations/armorblox.md index 8044e33887..6df836473f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/armorblox.md +++ b/docs/platform-services/automation-service/app-central/integrations/armorblox.md @@ -23,8 +23,23 @@ Armorblox secures enterprise communications over email and other cloud office ap ## Configure Armorblox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Tenant Name**. Enter your [Armorblox tenant name](https://armorblox.stoplight.io/docs/public-apis/6e3583e334a34-armorblox-api#tenant-name). + +* **API Key**. Enter the [Armorblox API key](https://armorblox.stoplight.io/docs/public-apis/6e3583e334a34-armorblox-api#api-key). + +* **Mock API**. Select to run the integration on a [mock server](https://armorblox.stoplight.io/docs/public-apis/6e3583e334a34-armorblox-api#api-key). +* +* +* +* Armorblox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/atlassian-confluence.md b/docs/platform-services/automation-service/app-central/integrations/atlassian-confluence.md index e2bf8fe20c..96b6d8e32d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/atlassian-confluence.md +++ b/docs/platform-services/automation-service/app-central/integrations/atlassian-confluence.md @@ -26,8 +26,23 @@ To retrieve the API token, see the [Atlassian documentation](https://support.atl ## Configure Atlassian Confluence in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL of your Atlassian Confluence instance. + +* **Username**. Enter the username of the user authorized to provide authentication for the Atlassian Confluence integration. + +* **Token**. Enter the API token you created [above](#configure-atlassian-confluence-configuration). +* +* +* +* Atlassian Confluence Logger configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-cloud.md b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-cloud.md index ec412755a8..1a2d0996ec 100644 --- a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-cloud.md +++ b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-cloud.md @@ -56,13 +56,31 @@ A revoked token no longer works and is permanently removed from your account. If ## Configure Atlassian Jira Cloud in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **URL API**. Enter your Atlassian site URL. For example, `https://your-atlassian-site.atlassian.net/`. For information, see [Atlassian documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/#about). - * **Label**. Add a name for the resource. - * **URL API**. Enter your Atlassian site URL. For example, `https://your-atlassian-site.atlassian.net/`. For information about Atlassian, see [Atlassian documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/#about). - * **Username**. Enter your email address. - * **API Token**. Insert the previously copied token.
atlassian-jira-v2-8 +* **Username**. Enter the username (email address) of the admin user authorized to authenticate the integration. + +* **API Token**. Enter the token you [created earlier](#create-an-api-token). +* +* +* +* +* +* +* + +atlassian-jira-v2-8 For information about Atlassian Jira Cloud, see [Jira Cloud documentation](https://support.atlassian.com/jira-software-cloud/resources/). For the REST API v3, see the [REST API v3 documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/). diff --git a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-v2.md b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-v2.md index 74cda7fd30..923674d5d5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira-v2.md @@ -60,16 +60,37 @@ Sign in to [Jira](https://id.atlassian.com) with your Atlassian account. ## Configure Atlassian Jira V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **URL API**. Enter your Atlassian site URL. For example, `https://your-atlassian-site.atlassian.net/`. For information, see [Atlassian documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v2/intro/#about). - * **Label**. Add a name for the resource. - * **URL API**. Enter your Atlassian site URL. For example, `https://your-atlassian-site.atlassian.net/`. For information, see [Atlassian documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v2/intro/#about). - * **Username**. Enter your email address. - * **API Token**. Insert the previously copied token. - * Optional fields in the resource are used for actions. - * Populate **Jira Project Name** when using the Issues **Jira Daemon** action. - * Populate **Cloud SOAR API URL** and **Cloud SOAR JWT (token)** when using the **Add Issue Attachment To Incident** action.
atlassian-jira-v2-5 +* **Username**. Enter the username (email address) of the admin user authorized to authenticate the integration. + +* **API Token**. Enter the [token](https://developer.atlassian.com/cloud/commerce-it-frontoffice/overview/papi/onboarding/api-token/create/#create-a-token) you [created earlier](#create-an-api-token). +* +* +* **Jira Project Name (Daemon)**. Enter the Jira [project name](https://confluence.atlassian.com/adminjiraserver/defining-a-project-938847066.html). + +* +* +* +* + +:::note +* Populate **Jira Project Name** when using the Issues **Jira Daemon** action. +* Populate **Cloud SOAR API URL** and **Cloud SOAR JWT (token)** when using the **Add Issue Attachment To Incident** action. +::: + +atlassian-jira-v2-5 For information about Atlassian Jira, see [Jira documentation]( https://confluence.atlassian.com/jira). For the REST API v2, see the [REST API v2 documentation](https://developer.atlassian.com/cloud/jira/platform/rest/v2/intro/). diff --git a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira.md b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira.md index 9d56cf9a6e..088dfcecd4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/atlassian-jira.md +++ b/docs/platform-services/automation-service/app-central/integrations/atlassian-jira.md @@ -36,8 +36,33 @@ Ticketing System ## Configure Atlassian Jira in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **URL**. Enter your Atlassian site URL. For example, `https://your-atlassian-site.atlassian.net/`. For information, see [Atlassian documentation](https://support.atlassian.com/jira/kb/find-your-site-url-to-set-up-the-jira-data-center-and-server-mobile-app/). + +* **Personal Access Token (PAT)**. Enter your Jira [personal access token](https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html). + +* **Username**. If you don't provide a personal access token, enter the username (email address) of the Jira admin user authorized to authenticate the integration. + +* **Password**. Enter the password for your Jira admin user. +* +* +* +* +* +* **Jira Project Name (Daemon)**. Enter the Jira [project name](https://confluence.atlassian.com/adminjiraserver/defining-a-project-938847066.html). + +* +* Atlassian Jira Logger configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/atlassian-opsgenie.md b/docs/platform-services/automation-service/app-central/integrations/atlassian-opsgenie.md index eeae702b15..c7f38fb9b8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/atlassian-opsgenie.md +++ b/docs/platform-services/automation-service/app-central/integrations/atlassian-opsgenie.md @@ -77,8 +77,21 @@ Please keep in mind that the API keys of the team integrations can only be used ## Configure Atlassian OpsGenie in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the OpsGenie API URL. The default value is `https://api.opsgenie.com` + +* **API Key**. Enter the [OpsGenie API key](https://support.atlassian.com/opsgenie/docs/api-key-management/) that you [created earlier](#atlassian-opsgenie-configuration). +* +* +* +* Atlassian Opsgenie Logger configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/automox.md b/docs/platform-services/automation-service/app-central/integrations/automox.md index 0c6ba83162..b13963d2c9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/automox.md +++ b/docs/platform-services/automation-service/app-central/integrations/automox.md @@ -35,11 +35,23 @@ Follow these steps to [get your API key from Automox](https://docs.automox.com/p ## Configure Automox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Automox site URL. The default value is `https://console.automox.com` - * **URL**. The Automox URL. Default: 'https://console.automox.com' - * **API Key**. The API Key you copied earlier.
Automox configuration +* **API Key**. Enter the API key you [copied earlier](#automox-configuration). +* +* +* +* + +Automox configuration For information about Automox, see [Automox documentation](https://docs.automox.com/product/Home.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-athena.md b/docs/platform-services/automation-service/app-central/integrations/aws-athena.md index d12b74a08b..44e7b77a16 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-athena.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-athena.md @@ -33,15 +33,28 @@ To [get access key and secret access key](https://docs.aws.amazon.com/athena/lat ## Configure Amazon Athena in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. The desired name for the resource. - * **AWS Region**. Your AWS region. (Default: us-east-2). - * **Access Key ID**. Your Access Key ID. - * **Secret Access Key**. Your Secret Access Key.
AWS Athena configuration +* +* +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS Athena configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-cloudfront.md b/docs/platform-services/automation-service/app-central/integrations/aws-cloudfront.md index 72206dcf73..37e03152dc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-cloudfront.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-cloudfront.md @@ -24,12 +24,29 @@ Amazon CloudFront integrates with AWS Identity and Access Management (IAM), a se ## Configure AWS CloudFront in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS CloudFront configuration +* +* +* **Service Name**. Enter `AWS CloudFront`. +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS CloudFront configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-cloudtrail.md b/docs/platform-services/automation-service/app-central/integrations/aws-cloudtrail.md index 9a9a592d5f..55bc604e2d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-cloudtrail.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-cloudtrail.md @@ -29,12 +29,28 @@ Interact with AWS CloudTrail through Trails and Events. ## Configure AWS CloudTrail in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS CloudTrail configuration +* +* +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS CloudTrail configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-cloudwatchlogs.md b/docs/platform-services/automation-service/app-central/integrations/aws-cloudwatchlogs.md index 8670bc315d..ccf11c6e20 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-cloudwatchlogs.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-cloudwatchlogs.md @@ -33,12 +33,27 @@ Interact with AWS CloudWatch through Groups, Streams, Metric Filters, and Retent ## Configure AWS CloudWatch Logs in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS CloudWatch Logs configuration +* +* +* +* +* **URL**. Enter your [AWS CloudWatch Logs URL](https://docs.aws.amazon.com/general/latest/gr/cwl_region.html), for example, `logs.us-east-1.amazonaws.com`. +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS CloudWatch Logs configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-ec2.md b/docs/platform-services/automation-service/app-central/integrations/aws-ec2.md index d02f49183a..76dcaa4b55 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-ec2.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-ec2.md @@ -49,12 +49,26 @@ Using the integration with EC2, you can enrich incidents with specific EC2 data, ## Configure AWS EC2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS EC2 configuration +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS EC2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-eks.md b/docs/platform-services/automation-service/app-central/integrations/aws-eks.md index 2761e9b7b9..a2be87e738 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-eks.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-eks.md @@ -46,12 +46,29 @@ This integration provides comprehensive Kubernetes cluster insights, node and po ## Configure AWS EKS in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS EKS configuration +* +* +* +* +* **Session Token**. Enter the session token if you are using [temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html). +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS EKS configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-guardduty.md b/docs/platform-services/automation-service/app-central/integrations/aws-guardduty.md index 6082664baa..e265b5900c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-guardduty.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-guardduty.md @@ -42,12 +42,30 @@ Interact with AWS GuardDuty during incident investigation. ## Configure AWS GuardDuty in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS GuardDuty configuration +* +* +* **Service Name**. Enter `Amazon GuardDuty`. +* +* +* **Server URL**. Enter your [AWS GuardDuty URL](https://docs.aws.amazon.com/general/latest/gr/guardduty.html), for example, `guardduty.us-east-1.amazonaws.com`. +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS GuardDuty configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-iam.md b/docs/platform-services/automation-service/app-central/integrations/aws-iam.md index e73a0ba603..2c67a03b95 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-iam.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-iam.md @@ -42,12 +42,26 @@ AWS IAM (Identity and Access Management) is a web service that helps securely co ## Configure AWS IAM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS IAM configuration +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS IAM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-inspector.md b/docs/platform-services/automation-service/app-central/integrations/aws-inspector.md index 3569aeb2bd..98e8aa7d4f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-inspector.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-inspector.md @@ -23,15 +23,26 @@ Amazon Inspector enables you to analyze the behavior of your AWS resources and t ## Configure AWS Inspector in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. Name of the resource. - * **Access Key**. Access Key of AWS EC2. - * **Secret Key**. Secret Key of AWS EC2. - * **Region**. EC2 Region.
AWS Inspector configuration - -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +* +* +* +* +* +* + +AWS Inspector configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-network-firewall.md b/docs/platform-services/automation-service/app-central/integrations/aws-network-firewall.md index 4292b454d0..f63aa5fa38 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-network-firewall.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-network-firewall.md @@ -27,12 +27,28 @@ AWS Network Firewall is a stateful, managed, network firewall and intrusion dete ## Configure AWS Network Firewall in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS NetWork Firewall configuration +* +* +* +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS NetWork Firewall configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-private-certificate-authority.md b/docs/platform-services/automation-service/app-central/integrations/aws-private-certificate-authority.md index 9c5560f60d..588ffdc841 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-private-certificate-authority.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-private-certificate-authority.md @@ -29,12 +29,28 @@ AWS Private CA enables creation of private certificate authority (CA) hierarchie ## Configure AWS Private Certificate Authority in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS Private Certificate Authority configuration +* +* +* +* **Session Token**. Enter the session token if you are using [temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html). +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS Private Certificate Authority configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-route53.md b/docs/platform-services/automation-service/app-central/integrations/aws-route53.md index 0f34eda6b0..9f9df2dc44 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-route53.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-route53.md @@ -1,5 +1,5 @@ --- -title: AWS Route53 +title: AWS Route 53 description: '' --- import useBaseUrl from '@docusaurus/useBaseUrl'; @@ -9,7 +9,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; ***Version: 1.1 Updated: Jun 21, 2023*** -Interact with DNS records through AWS Route53. +Interact with DNS records through AWS Route 53. ## Actions @@ -24,19 +24,34 @@ Interact with DNS records through AWS Route53. * [AWS Route 53](https://github.com/boto/boto3/blob/develop/LICENSE) -## Configure AWS Route53 in Automation Service and Cloud SOAR +## Configure AWS Route 53 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS Route53 configuration +* +* **URL**. Enter your [AWS Route 53 URL](https://docs.aws.amazon.com/general/latest/gr/r53.html), for example, `route53.amazonaws.com`. +* +* +* +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS Route 53 configuration -For information about AWS Route53, see [Route53 documentation](https://docs.aws.amazon.com/route53/). +For information about AWS Route 53, see [Route 53 documentation](https://docs.aws.amazon.com/route53/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-s3.md b/docs/platform-services/automation-service/app-central/integrations/aws-s3.md index afac1093b7..274c39975a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-s3.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-s3.md @@ -31,17 +31,30 @@ Interact with AWS S3 buckets, objects, and policies. ## Configure AWS S3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -AWS S3 configuration +* +* +* +* +* **URL**. Enter your [Amazon S3 URL](https://docs.aws.amazon.com/general/latest/gr/s3.html), for example, `s3.us-east-1.amazonaws.com`. +* +* -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +AWS S3 configuration -For information about AWS S3, see [S3 documentation](https://docs.aws.amazon.com/s3/). - ## Change Log * October 3, 2019 - First upload diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-security-hub.md b/docs/platform-services/automation-service/app-central/integrations/aws-security-hub.md index 468f3a839f..614874b988 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-security-hub.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-security-hub.md @@ -27,15 +27,32 @@ Interact with AWS Security Hub through Insights and Findings. ## Configure AWS Security Hub in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; - - +* +* **Host**. Enter your [Security Hub URL](https://docs.aws.amazon.com/general/latest/gr/sechub.html), for example, `securityhub.us-east-1.amazonaws.com`. +* +* **Service Name**. Enter `AWS Security Hub`. +* +* +* +* +* AWS Security Hub configuration + + For information about AWS Security Hub, see [AWS Security Hub documentation](https://docs.aws.amazon.com/securityhub/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service.md b/docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service.md index aca060c5c3..a67d99b0ff 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service.md @@ -24,15 +24,28 @@ Amazon Simple Notification Service (SNS) is a pub/sub messaging and mobile notif ## Configure Amazon Simple Notification Service in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. Name of the resource for AWS SNS. - * **Access key ID**. Enter your AWS Access Key. - * **Secret Access key**. Enter your AWS Secret Access Key. For information about access key ID and secret access key, see [AWS documentation](https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html#access-keys-and-secret-access-keys). - * **AWS Region**. Enter the AWS region for the SNS topic.
AWS Simple Notification Service configuration - -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +* +* +* +* +* +* +* +* + +AWS Simple Notification Service configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-sqs.md b/docs/platform-services/automation-service/app-central/integrations/aws-sqs.md index 0374166c9e..42d1a70ec9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-sqs.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-sqs.md @@ -27,15 +27,29 @@ Using the integration with SQS, you can gather current queues, add a new queue, ## Configure AWS SQS in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; - - +* +* +* +* +* +* AWS SQS configuration + + For information about AWS SQS, see [SQS documentation](https://docs.aws.amazon.com/sqs/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/aws-waf.md b/docs/platform-services/automation-service/app-central/integrations/aws-waf.md index a504aec991..eae648ff96 100644 --- a/docs/platform-services/automation-service/app-central/integrations/aws-waf.md +++ b/docs/platform-services/automation-service/app-central/integrations/aws-waf.md @@ -69,16 +69,30 @@ It is compatible with all standard environments where WAFv2 actions are supporte ## Configure AWS WAF in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +import AWSRegions from '../../../../reuse/automation-service/aws/region.md'; +import AWSAccesskey from '../../../../reuse/automation-service/aws/access-key.md'; +import AWSSecret from '../../../../reuse/automation-service/aws/secret.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -* Access Key -* Secret Key -* AWS Region -* Scope -* Automation Engine
Edit Resource for AWS WAF - -import IntegrationsAuthAWS from '../../../../reuse/integrations-authentication-aws.md'; +* +* +* +* **Session Token**. Enter the session token if you are using [temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html). +* +* **Scope**. Select the scope for WAF ([**Regional** or **CloudFront**](https://docs.aws.amazon.com/waf/latest/developerguide/how-aws-waf-works-resources.html)). +* +* +* +* + +Edit Resource for AWS WAF diff --git a/docs/platform-services/automation-service/app-central/integrations/axonius.md b/docs/platform-services/automation-service/app-central/integrations/axonius.md index 3efde6355b..5cc61917f5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/axonius.md +++ b/docs/platform-services/automation-service/app-central/integrations/axonius.md @@ -22,7 +22,7 @@ Axonius is a cybersecurity asset management platform that provides comprehensive ## Axonius configuration -The API Key and Secret for an Axonius user is available from the My Account page. +The API Key and Secret for an Axonius user is available from the [My Account page](https://docs.axonius.com/docs/account-settings). 1. Log in to Axonius with a user account or Service Account whose role has the **API access enabled** permission. 1. At the bottom of the Navigation toolbar, click on your account avatar.
axonius-1 @@ -43,15 +43,27 @@ More info related to creating queries is [here](https://docs.axonius.com/docs/qu ## Configure Axonius in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Axonius URL**. Enter the [URL to your Axonius instance](https://docs.axonius.com/docs/configuring-system-external-url), for example, `https://your-axonius-instance.axonius.com` - * **Label**. The name of the resource. - * **URL**. URL to Axonius instance, for example, 'https://your-axonius-instance.axonius.com'. - * **API Key**. The API Key that you copied earlier. - * **API Secret**. The API Secret that you copied earlier.
Axonius configuration +* **API Key**. Enter the [API key](https://docs.axonius.com/docs/managing-api-settings) that you [copied earlier](#axonius-configuration). -For information about Axonius, see [Axonius documentation](https://docs.axonius.com/). +* **API Secret**. Enter the API secret that you copied earlier. +* +* +* +* + +Axonius configuration + +For information about Axonius, see [Axonius documentation](https://docs.axonius.com/docs/the-axonius-platform). ## External Libraries diff --git a/docs/platform-services/automation-service/app-central/integrations/azure-ad.md b/docs/platform-services/automation-service/app-central/integrations/azure-ad.md index c3511d00c2..e607712b04 100644 --- a/docs/platform-services/automation-service/app-central/integrations/azure-ad.md +++ b/docs/platform-services/automation-service/app-central/integrations/azure-ad.md @@ -32,7 +32,7 @@ Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access ## Azure Active Directory configuration -The following steps show how to create an Azure AD Application in order to work with Cloud SOAR. +The following steps show how to create an Azure AD Application in order to work with Sumo Logic automation. 1. Log in to Azure portal with the user that has administrator privileges. 1. Navigate to **Azure Active Directory** > **App registrations** > **New registration**.
azure-ad-1 @@ -60,8 +60,25 @@ The following steps show how to create an Azure AD Application in order to work ## Configure Azure AD in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* + * **API URL**. Enter the Azure AD API URL, for example, `https://graph.microsoft.com` + +* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant) located when you configured Azure AD [above](#azure-active-directory-configuration). + +* **Application (Client) ID**. Enter the client ID from your Azure Application. + +* **Application (Client) Secret**. Enter your client secret. +* +* +* +* Azure AD configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/bitdefender-gravityzone.md b/docs/platform-services/automation-service/app-central/integrations/bitdefender-gravityzone.md index 15c491c6ca..92d91c2fb7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/bitdefender-gravityzone.md +++ b/docs/platform-services/automation-service/app-central/integrations/bitdefender-gravityzone.md @@ -30,8 +30,21 @@ Layered Next-Gen Security for physical, virtual, and cloud environments provided ## Configure Bitdefender GravityZone in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL for your GravityZone site. + +* **API Key**. Enter your GravityZone [API key](https://www.bitdefender.com/business/support/en/77209-125277-public-api.html). +* +* +* +* Bitdefender Gravity Zone configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/bitsight-security-performance-management.md b/docs/platform-services/automation-service/app-central/integrations/bitsight-security-performance-management.md index 95a0d3965d..8711941b32 100644 --- a/docs/platform-services/automation-service/app-central/integrations/bitsight-security-performance-management.md +++ b/docs/platform-services/automation-service/app-central/integrations/bitsight-security-performance-management.md @@ -21,18 +21,29 @@ BitSight offers the world's leading security ratings solution with a mission to ## BitSight configuration -1. To [generate an API Token](https://help.bitsighttech.com/hc/en-us/articles/115014888388-API-Token-Management), after signing in, go to top right corner on the gear icon and select **Account** . +1. To [generate an API Token](https://help.bitsighttech.com/hc/en-us/articles/115014888388-API-Token-Management), after signing in, go to top right corner on the gear icon and select **Account**. 1. In the **API Token** section, click **Generate New Token** (this token will be used later in the configuration).
bitsight-security-performance-management-1 ## Configure BitSight Security Performance Management in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your BitSight API URL, for example, `https://api.bitsighttech.com` - * **Label**. The name of the resource. - * **URL**. URL of BitSight API (default URL [https://api.bitsighttech.com]() is already provided). - * **API Token**. API token copied from BitSight platform.
BitSight Security Performance Management configuration +* **API Token**. Enter the API token copied [above](#bitsight-configuration). +* +* +* +* + +BitSight Security Performance Management configuration For information about BitSight Security Performance Management, see [Security Performance Management documentation](https://help.bitsighttech.com/hc/en-us/categories/4410024719255-Security-Performance-Management#). diff --git a/docs/platform-services/automation-service/app-central/integrations/blueliv-community.md b/docs/platform-services/automation-service/app-central/integrations/blueliv-community.md index 9099811f8c..01a89ec195 100644 --- a/docs/platform-services/automation-service/app-central/integrations/blueliv-community.md +++ b/docs/platform-services/automation-service/app-central/integrations/blueliv-community.md @@ -20,8 +20,20 @@ Enrich incident evidence with threat intelligence data from Blueliv. ## Configure Blueliv Community in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Blueliv Community site URL. + +* **Token**. Enter an API token from Blueliv Community. +* +* +* Blueliv Community configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/blueliv.md b/docs/platform-services/automation-service/app-central/integrations/blueliv.md index 2c4e58aace..1b04c3a632 100644 --- a/docs/platform-services/automation-service/app-central/integrations/blueliv.md +++ b/docs/platform-services/automation-service/app-central/integrations/blueliv.md @@ -30,8 +30,22 @@ Enrich incident evidence with threat intelligence data from Blueliv. ## Configure Blueliv in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Blueliv site URL. + +* **Username**. Enter the username of a Blueliv admin user authorized to provide authentication for the integration. + +* **Password**. Enter the admin user's password. +* +* +* Blueliv configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ca-service-desk.md b/docs/platform-services/automation-service/app-central/integrations/ca-service-desk.md index a95df6b52f..ea682450b8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ca-service-desk.md +++ b/docs/platform-services/automation-service/app-central/integrations/ca-service-desk.md @@ -23,8 +23,27 @@ Work with Resources within CA Service Desk. ## Configure CA Service Desk in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL to the CA Service Desk instance. + +* **Port**. Enter the CA Service Desk [REST port](https://techdocs.broadcom.com/us/en/ca-enterprise-software/business-management/ca-service-management/17-4/installing/installation-prerequisites/supported-ports-and-port-ranges.html). + +* **Username**. Enter the [username](https://techdocs.broadcom.com/us/en/ca-enterprise-software/business-management/ca-service-management/17-4/reference/ca-service-desk-manager-reference-commands/technical-reference/rest-http-methods.html#concept.dita_571265def7bea5a79bc6e3bba4cd061d4d03b036_RESTBasicAuthentication) of a CA Service admin user authorized to provide authentication for the integration. The username is needed for the Authorize action. + +* **Password**. Enter the CA Service Desk REST password for the admin user. This is needed for the Authorize action. + +* **Access Key**. Enter the CA Service Desk REST [Access key](https://techdocs.broadcom.com/us/en/ca-enterprise-software/business-management/ca-service-management/17-4/reference/ca-service-desk-manager-reference-commands/technical-reference/rest-http-methods.html#concept.dita_571265def7bea5a79bc6e3bba4cd061d4d03b036_RESTSecretKeyAuthentication) obtained from the Authorize action. + +* **Secret Key**. Enter the CA Service Desk REST Secret key obtained from the Authorize action. +* +* CA Service Desk configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/censys-v2.md b/docs/platform-services/automation-service/app-central/integrations/censys-v2.md index 63612daa1d..1539901d96 100644 --- a/docs/platform-services/automation-service/app-central/integrations/censys-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/censys-v2.md @@ -21,13 +21,25 @@ Censys reduces your Internet attack surface by continually discovering unknown a ## Configure Censys V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL of Censys V2, for example `https://search.censys.io` - * **Label**. Name of the resource. - * **URL**. URL of Censys V2 (example URL: [https://search.censys.io](https://search.censys.io/api)). - * **User ID** - * **User Secret**
Censys V2 configuration +* **User ID**. Enter the [API ID](https://docs.censys.com/docs/ls-api). + +* **User Secret**. Enter the secret for the API ID. +* +* +* +* + +Censys V2 configuration For information about Censys V2, see [Censys documentation](https://docs.censys.com/docs). diff --git a/docs/platform-services/automation-service/app-central/integrations/censys.md b/docs/platform-services/automation-service/app-central/integrations/censys.md index 290c1596bd..d95d3a5c1e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/censys.md +++ b/docs/platform-services/automation-service/app-central/integrations/censys.md @@ -23,8 +23,23 @@ Search Censys for enrichment data during active investigation. ## Configure Censys in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the URL of Censys V2, for example `https://search.censys.io` + +* **API ID**. Enter the [API ID](https://docs.censys.com/docs/ls-api). + +* **Secret**. Enter the secret for the API ID. +* +* +* +* Censys configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/certego.md b/docs/platform-services/automation-service/app-central/integrations/certego.md index 74c3beb843..77f9ab1374 100644 --- a/docs/platform-services/automation-service/app-central/integrations/certego.md +++ b/docs/platform-services/automation-service/app-central/integrations/certego.md @@ -21,13 +21,25 @@ Certego Managed services for breach detection, cyber security, and response to t ## Configure Certego in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL API**. Enter the Certego URL API. The default value is `https://panoptikon.certego.net/` - * **Label**. The name for the resource. - * **URL API**. Certego URL API. Default: `https://panoptikon.certego.net/`. - * **Username**. Your Certego username. - * **Password**. Your Certego password.
Certego configuration +* **Username**. Enter the username of a Certego admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the Certego admin user. +* +* +* +* + +Certego configuration For information about Certego, see the [Certego website](https://www.certego.net/). diff --git a/docs/platform-services/automation-service/app-central/integrations/check-host.md b/docs/platform-services/automation-service/app-central/integrations/check-host.md index 41bf42e94b..001e0362a6 100644 --- a/docs/platform-services/automation-service/app-central/integrations/check-host.md +++ b/docs/platform-services/automation-service/app-central/integrations/check-host.md @@ -17,15 +17,24 @@ Check-Host is a modern online tool for website monitoring and checking performan * **Check Host Status Daemon** *(Daemon)* - Daemon to check the URL availability. * **Get Nodes** *(Enrichment)* - Get the supported nodes list. -## Check-Host configuration - -No configuration is needed since the it does not require any authentication. - ## Check-Host in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL for Check-Host, `https://check-host.net` + +* **Node**. Enter the Check-Host [node](https://check-host.net/about/api?lang=en#nodes-list-section). +* +* +* +* Check-Host configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/check-point.md b/docs/platform-services/automation-service/app-central/integrations/check-point.md index cb351e21e7..2090e0eb3d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/check-point.md +++ b/docs/platform-services/automation-service/app-central/integrations/check-point.md @@ -41,8 +41,24 @@ Network Security ## Configure Check Point in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Check Point URL. + +* **API Key**. Enter the [Check Point API key](https://docs.cgn.portal.checkpoint.com/reference/authentication). + +* **Username**. Enter the username of a Check Point admin user authorized to authenticate the integration. + +* **Password**. Enter the password of the admin user. +* +* +* Check-Point configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/chronicle.md b/docs/platform-services/automation-service/app-central/integrations/chronicle.md index 2a22b7e29e..94d074a8ca 100644 --- a/docs/platform-services/automation-service/app-central/integrations/chronicle.md +++ b/docs/platform-services/automation-service/app-central/integrations/chronicle.md @@ -33,8 +33,19 @@ Chronicle SIEM is a cloud service, built as a specialized layer on top of core G ## Configure Chronicle in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the [Chronicle API URL](https://cloud.google.com/chronicle/docs/reference/rest). + +* **Service Account Credentials JSON**. Enter the [service account credentials](https://cloud.google.com/chronicle/docs/reference/ingestion-api#getting_api_authentication_credentials) in JSON format. +* +* Chronicle configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/circl-cve-search.md b/docs/platform-services/automation-service/app-central/integrations/circl-cve-search.md index 1aa5657aed..163d324094 100644 --- a/docs/platform-services/automation-service/app-central/integrations/circl-cve-search.md +++ b/docs/platform-services/automation-service/app-central/integrations/circl-cve-search.md @@ -21,8 +21,16 @@ Utilize the CIRCL CVE Search to retrieve lists of CVEs by product as well as det ## Configure CIRCL CVE Search in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* +* Circl CVE Search configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-amp-for-endpoints.md b/docs/platform-services/automation-service/app-central/integrations/cisco-amp-for-endpoints.md index cf01f646c4..fd873369ca 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-amp-for-endpoints.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-amp-for-endpoints.md @@ -43,8 +43,22 @@ Perform a wide variety of Enrichment and Containment actions for endpoint invest ## Configure Cisco AMP for Endpoints in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Select your Cisco AMP API URL, for example, `https://api.amp.cisco.com`. + +* **Client ID**. Enter your Cisco AMP [client ID](https://developer.cisco.com/docs/secure-endpoint/overview/). + +* **API Key**. Enter the API key associated with the client ID. +* +* +* Cisco AMP for Endpoints configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-asa.md b/docs/platform-services/automation-service/app-central/integrations/cisco-asa.md index 90a02fbce6..aa6c2302e3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-asa.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-asa.md @@ -25,8 +25,21 @@ Get, Add and Update ACLs, Policies, and Routes with Cisco ASA. ## Configure Cisco ASA in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Cisco ASA server URL. + +* **Username**. Enter the username of a Cisco ASA admin authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Cisco ASA admin user. +* +* Cisco ASA configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-cyber-vision.md b/docs/platform-services/automation-service/app-central/integrations/cisco-cyber-vision.md index 35826327c9..4c134475f7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-cyber-vision.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-cyber-vision.md @@ -28,8 +28,20 @@ Cisco Cyber Vision can delete, set and retrieve allowing ICS with dynamic monito ## Configure Cisco Cyber Vision in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the name of your Cisco Cyber Vision host. + +* **Token**. Enter a Cisco Cyber Vision [token](https://www.cisco.com/c/en/us/td/docs/security/cyber_vision/Release-5-2-0/b-cisco-cyber-vision-administration-guide-release-5-2-0/m-configure-cisco-cyber-vision.html#topic_5340). +* +* +* Cisco Cyber Vision configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-esa.md b/docs/platform-services/automation-service/app-central/integrations/cisco-esa.md index 60e9ddf3ef..472f5bdd8d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-esa.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-esa.md @@ -19,12 +19,25 @@ Cisco ESA provides a comprehensive view of security for improved threat intellig ## Configure Cisco ESA in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * URL API - * Username - * Password
Cisco ESA configuration +* +* **URL**. Enter your Cisco ESA API URL. + +* **Username**. Enter the username of a Cisco ESA admin authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Cisco ESA admin user. +* +* +* +* + + Cisco ESA configuration For information about Cisco Secure Email Gateway (formerly Email Security Appliance), see [Cisco Secure Email Gateway documentation](https://www.cisco.com/c/en/us/support/security/email-security-appliance/series.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-ios-xe.md b/docs/platform-services/automation-service/app-central/integrations/cisco-ios-xe.md index 1af91fc35a..fc3a7a4f71 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-ios-xe.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-ios-xe.md @@ -27,8 +27,23 @@ Utilize and manipulate ACLs and Interfaces with Cisco IOS XE. ## Configure Cisco IOS XE in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Cisco IOS XE server URL. + +* **Username**. Enter the username of a Cisco IOS XE admin authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Cisco IOS XE admin user. +* +* +* +* Cisco IOS XE configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-ise.md b/docs/platform-services/automation-service/app-central/integrations/cisco-ise.md index 919f6870bf..33994c0cd3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-ise.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-ise.md @@ -47,8 +47,23 @@ Therefore, the first requirement is to [enable ERS](https://www.cisco.com/c/en/u ## Configure Cisco ISE in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Cisco ISE API URL. + +* **Username**. Enter the username of a Cisco ISE admin authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Cisco ISE admin user. +* +* +* +* Cisco ISE configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-meraki.md b/docs/platform-services/automation-service/app-central/integrations/cisco-meraki.md index eda4cc1ea7..9799f4bde6 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-meraki.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-meraki.md @@ -44,8 +44,18 @@ Updated: Jun 26, 2023*** ## Configure Cisco Meraki in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Key**. Enter a [Cisco Meraki API key](https://developer.cisco.com/meraki/api-v1/authorization/#obtaining-your-meraki-api-key). + +* +* Cisco Meraki configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-stealthwatch.md b/docs/platform-services/automation-service/app-central/integrations/cisco-stealthwatch.md index 7c0147e9eb..8831396d1d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-stealthwatch.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-stealthwatch.md @@ -27,8 +27,25 @@ Cisco Stealthwatch provides easy to use and comprehensive APIs for reporting, ma ## Configure Cisco Stealthwatch in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the name of your Cisco Stealthwatch host. + +* **Username**. Enter the username of a Cisco Stealthwatch admin authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Cisco Stealthwatch admin user. + +* **Tenant ID**. Enter a Cisco Stealthwatch tenant ID. +* +* +* +* Cisco Stealthwatch configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-threat-grid.md b/docs/platform-services/automation-service/app-central/integrations/cisco-threat-grid.md index ea1f32abd6..3a5f399bfa 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-threat-grid.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-threat-grid.md @@ -24,8 +24,22 @@ Utilize the Cisco AMP Threat Grid to retrieve information about incident element ## Configure Cisco Threat Grid in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Cisco Threat Grid URL, for example, `https://panacea.threatgrid.com` + +* **API Key**. Enter the Cisco Threat Grid API key. + +* **Detonate timeout in minutes**. Set the maximum amount of time the integration will wait for a server's response before terminating the connection. Enter the connection timeout time in minutes (for example, `3`). +* +* +* Cisco Threat Grid configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-threat-response.md b/docs/platform-services/automation-service/app-central/integrations/cisco-threat-response.md index 323bf457a7..3620b98085 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-threat-response.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-threat-response.md @@ -25,8 +25,24 @@ Gather Cisco Threat Response threat intelligence data to enrich incident artifac ## Configure Cisco Threat Response in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Client ID**. Enter a Cisco Threat Response [client ID](https://ciscosecurity-sx-00-integration-workflows.readthedocs-hosted.com/en/latest/threatresponse/api_intro/api_client.html#create-api-client-in-threat-response-ui). + +* **Client Password**. Enter the client password associated with the client ID. + +* **Region**. Enter the [region](https://ciscosecurity-sx-00-integration-workflows.readthedocs-hosted.com/en/latest/threatresponse/api_intro/api_client.html?highlight=region#global-api-endpoint-urls) of your Cisco Threat Response instance. + +* **Logger Instance**. +* +* +* Cisco Threat Response configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-investigate.md b/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-investigate.md index ea48725a50..b36304b6e1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-investigate.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-investigate.md @@ -26,8 +26,21 @@ Threat Intelligence-Reputation ## Configure Cisco Umbrella Investigate in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL for your Cisco Umbrella Investigate instance. + +* **API Token**. Enter an [API key](https://docs.umbrella.com/deployment-umbrella/docs/add-umbrella-api-keys) for Cisco Umbrella Investigate. +* +* +* +* Cisco Umbrella Investigate configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-v2.md b/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-v2.md index 97db8c13a0..90f6d8adbe 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-umbrella-v2.md @@ -20,8 +20,23 @@ Updated: Jul 03, 2023*** ## Configure Cisco Umbrella V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the the API URL for your Cisco Umbrella V2 instance, for example, `https://api.umbrella.com` + +* **API Key**. Enter an [API key](https://developer.cisco.com/docs/cloud-security/umbrella-api-authentication/) for Cisco Umbrella V2. + +* **API Secret**. Enter the secret for the API key. +* +* +* +* Cisco Umbrella V2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cisco-webex.md b/docs/platform-services/automation-service/app-central/integrations/cisco-webex.md index 54fbcc27a8..31ecd1ab18 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cisco-webex.md +++ b/docs/platform-services/automation-service/app-central/integrations/cisco-webex.md @@ -29,12 +29,23 @@ Cisco Webex is a solution for video conferencing, online meetings, screen share, ## Configure Cisco Webex in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the API URL for your Cisco Webex instance. The default URL is `https://webexapis.com/` - * **Label**. The resource name. - * **URL**. The default url is 'https://webexapis.com/'. - * **Token**. Your Cisco Webex token.
Cisco Webex configuration +* **Token**. Enter a Cisco Webex [token](https://developer.webex.com/docs/getting-your-personal-access-token). +* +* +* +* + +Cisco Webex configuration For information about Cisco Webex, see [Webex documentation](https://developer.webex.com/docs). diff --git a/docs/platform-services/automation-service/app-central/integrations/claroty.md b/docs/platform-services/automation-service/app-central/integrations/claroty.md index e678b200e0..dd468f0bb8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/claroty.md +++ b/docs/platform-services/automation-service/app-central/integrations/claroty.md @@ -22,8 +22,23 @@ Query Claroty CTD, an OT scanner and monitoring system. Claroty CTD provides fun ## Configure Claroty in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL for your Claroty instance. + +* **Username**. Enter the username of a Claroty admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the Claroty admin user. +* +* +* +* Claroty configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cloudflare.md b/docs/platform-services/automation-service/app-central/integrations/cloudflare.md index d3eaf4b369..49bc045686 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cloudflare.md +++ b/docs/platform-services/automation-service/app-central/integrations/cloudflare.md @@ -35,35 +35,53 @@ Cloudflare makes everything you connect to the Internet secure, private, fast, a * [Rule expressions](https://developers.cloudflare.com/ruleset-engine/rules-language/expressions/) -## Cloudflare configuration for Global API Key +## Configure Cloudflare tokens + +### Cloudflare configuration for Global API key For a [Global API Key](https://developers.cloudflare.com/workers/wrangler/migration/v1-to-v2/wrangler-legacy/authentication/#global-api-key): 1. Sign in in Cloudflare using your email and password. -1. Go to your profile in the left menu and select My Profile. -1. From the left menu select API Tokens. -1. Under Global API Key is your token. +1. Go to your profile in the left menu and select **My Profile**. +1. From the left menu select **API Tokens**. +1. Under **Global API Key** is your token. 1. Make sure you copy and save them. -## Cloudflare configuration for Custom API Token +### Cloudflare configuration for a custom API token To [create a token](https://developers.cloudflare.com/workers/wrangler/migration/v1-to-v2/wrangler-legacy/authentication/#generate-tokens): 1. Sign in in Cloudflare using your email and password. -1. Go to your profile in the left menu and select My Profile. -1. From the left menu select API Tokens. -1. Click Create Token and select Create Custom Token. -1. Set Permissions: Choose the necessary permissions based on your use case. For more details, check the [Permissions](https://developers.cloudflare.com/fundamentals/api/reference/permissions/#account-permissions) -1. Confirm your settings, then click Continue to summary and Create Token. +1. Go to your profile in the left menu and select **My Profile**. +1. From the left menu select **API Tokens**. +1. Click **Create Token** and select **Create Custom Token**. +1. Choose the necessary permissions based on your use case. For more details, check the [Permissions](https://developers.cloudflare.com/fundamentals/api/reference/permissions/#account-permissions). +1. Confirm your settings, then click **Continue** and **Create Token**. 1. Copy the token securely as it will only be displayed once. ## Configure Cloudflare in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; -* **Email** is needed only when using global API token. Any valid email will work with custom token. -* Select the **Token Type** (the default is set as **global**). -* In the **API Key** field, insert the previously copied key.
cloudflare +* +* **URL**. Enter the URL for your Cloudflare instance. + +* **Email**. Enter the email only when using global API token. Any valid email will work with a custom token. + +* **Token Type**. Select **global** if you created a [global token](#cloudflare-configuration-for-global-api-key) above, or **custom** if created a [custom token](#cloudflare-configuration-for-a-custom-api-token). + +* **API Key**. Insert your [global or custom token](https://developers.cloudflare.com/workers/wrangler/migration/v1-to-v2/wrangler-legacy/authentication/#generate-tokens). +* +* +* +* + +cloudflare For information about Cloudflare, see [Cloudflare documentation](https://developers.cloudflare.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/cofense.md b/docs/platform-services/automation-service/app-central/integrations/cofense.md index 6571d0b4a7..eee85d24b7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cofense.md +++ b/docs/platform-services/automation-service/app-central/integrations/cofense.md @@ -19,8 +19,19 @@ Search Cofense for Threats and download Threat Reports. ## Configure Cofense in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API User Name**. Enter the username of the API user authorized to authenticate the integration. + +* **API Password**. Enter the password associated with the API user. +* +* Cisco Cofense configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/connectwise-manage.md b/docs/platform-services/automation-service/app-central/integrations/connectwise-manage.md index f453afd7cb..1d6642f3bc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/connectwise-manage.md +++ b/docs/platform-services/automation-service/app-central/integrations/connectwise-manage.md @@ -24,8 +24,27 @@ Create, update, search, and gather ticket information from ConnectWise. ## Configure ConnectWise Manage in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the API URL for your ConnectWise Manage instance, for example, `api-au.myconnectwise.net`, `api-eu.myconnectwise.net`, `api-na.myconnectwise.net`, or `api-staging.connectwisedev.com`. + +* **Company Name**. Enter your ConnectWise Manage company name. + +* **Public Key**. Enter a ConnectWise Manage public key. + +* **Private Key**. Enter a ConnectWise Manage private key. + +* **Client ID**. Enter a ConnectWise Manage client ID. +* +* +* +* Connectwise Manage configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/coralogix-query-logs.md b/docs/platform-services/automation-service/app-central/integrations/coralogix-query-logs.md index a0bf4dc500..e997984c44 100644 --- a/docs/platform-services/automation-service/app-central/integrations/coralogix-query-logs.md +++ b/docs/platform-services/automation-service/app-central/integrations/coralogix-query-logs.md @@ -26,17 +26,30 @@ Generate and then copy the [API Key](https://coralogix.com/docs/user-guides/acco ## Configure Coralogix - Query Logs in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Server URL**. Choose between the following URLs depending on the top level domain of your Coralogix account (.com, .in, etc.): - + for .eu use https://coralogix-esapi.coralogix.com - + for .us use https://esapi.coralogix.us - + for .in use https://es-api.app.coralogix.in - + for .eu2. use https://es-api.eu2.coralogix.com - + for sg.com use https://es-api.coralogixsg.com - * **Private Key**. Your Coralogix account private key. - * **Port**. Port usually 9443.
Coralogix Query Logs configuration +* +* **Server URL**. Choose between the following [Coralogix URLs](https://coralogix.com/docs/user-guides/account-management/account-settings/coralogix-domain/) depending on the top level domain of your Coralogix account (.com, .in, etc.): + * For `.eu` use `https://coralogix-esapi.coralogix.com` + * For `.us` use `https://esapi.coralogix.us` + * For `.in` use `https://es-api.app.coralogix.in` + * For `.eu2` use `https://es-api.eu2.coralogix.com` + * For `sg.com` use `https://es-api.coralogixsg.com` + +* **Port**. Enter your Coralogix port, usually `9443`. + +* **Private Key**. Enter your Coralogix account [private key](https://coralogix.com/docs/user-guides/account-management/api-keys/api-keys/). +* +* +* +* + +Coralogix Query Logs configuration For information about Coralogix - Query Logs, see [Coralogix documentation](https://coralogix.com/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/coralogix-send-logs.md b/docs/platform-services/automation-service/app-central/integrations/coralogix-send-logs.md index 8810342bc5..1f3390429b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/coralogix-send-logs.md +++ b/docs/platform-services/automation-service/app-central/integrations/coralogix-send-logs.md @@ -27,18 +27,32 @@ Generate and then copy the [API Key](https://coralogix.com/docs/user-guides/acco ## Configure Coralogix - Send Logs in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Choose between the following [Coralogix URLs](https://coralogix.com/docs/user-guides/account-management/account-settings/coralogix-domain/) depending on the top level domain of your Coralogix account (.com, .in, etc.): + * For `.eu` use `https://coralogix-esapi.coralogix.com` + * For `.us` use `https://esapi.coralogix.us` + * For `.in` use `https://es-api.app.coralogix.in` + * For `.eu2` use `https://es-api.eu2.coralogix.com` + * For `sg.com` use `https://es-api.coralogixsg.com` - * **Server URL**. Choose between the following URLs depending on the top level domain of your Coralogix account (.com, .in, etc.): - + for .com use https://api.coralogix.com - + for .us use https://api.coralogix.us - + for .in use https://api.app.coralogix.in - + for .eu2. use https://api.app.eu2.coralogix.com - + for sg.com use https://api.app.coralogixsg.com - * **Private Key**. Your Coralogix account private key. - * **Application Name**. The Coralogix application name. - * **Subsystem Name**. The Coralogix subsystem name.
Coralogix Send Logs configuration +* **Private Key**. Enter your Coralogix account [private key](https://coralogix.com/docs/user-guides/account-management/api-keys/api-keys/). + +* **Application Name**. Enter your Coralogix [application name](https://coralogix.com/docs/user-guides/account-management/account-settings/application-and-subsystem-names/). + +* **Subsystem Name**. Enter your Coralogix [subsystem name](https://coralogix.com/docs/user-guides/account-management/account-settings/application-and-subsystem-names/). +* +* +* +* + +Coralogix Send Logs configuration For information about Coralogix - Send Logs, see [Coralogix documentation](https://coralogix.com/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/corelight.md b/docs/platform-services/automation-service/app-central/integrations/corelight.md index 79a0f4ee90..11caab8364 100644 --- a/docs/platform-services/automation-service/app-central/integrations/corelight.md +++ b/docs/platform-services/automation-service/app-central/integrations/corelight.md @@ -19,8 +19,21 @@ Utilize Corelight during incident investigation. ## Configure Corelight in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **IP or Hostname**. Enter the IP or the hostname of your Corelight instance. Do not include the preceding `https://`. + +* **Username**. Enter the username of a Corelight admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* Corelight configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cortex-xdr.md b/docs/platform-services/automation-service/app-central/integrations/cortex-xdr.md index 2dde42da25..ac22232dab 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cortex-xdr.md +++ b/docs/platform-services/automation-service/app-central/integrations/cortex-xdr.md @@ -38,8 +38,23 @@ XDR ## Configure Cortex XDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Cortex XDR API URL**. Enter your Cortex XDR API URL, for example, `https://api-test-dev.xdr.us.paloaltonetworks.com/public_api/v1/` + +* **API Key**. Enter your [Cortex API key](https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Get-Started-with-Cortex-XDR-APIs). + +* **API Key ID**. Enter key ID associated with the API key. +* +* +* +* Cortex XDR configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cribl.md b/docs/platform-services/automation-service/app-central/integrations/cribl.md index 4fdf5ed12f..6b5b93237b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cribl.md +++ b/docs/platform-services/automation-service/app-central/integrations/cribl.md @@ -26,11 +26,23 @@ To obtain your Token follow the steps described in the [Cribl Documentation](htt ## Configure Cribl in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL API**. Enter your [Cribl API URL](https://docs.cribl.io/api/#base-urls). - * **URL API** - * **Token**. The obtain token from the API Reference.
Cribl configuration +* **Token**. Enter a [Cribl API token](https://docs.cribl.io/api/#authenticate-api). +* +* +* +* + +Cribl configuration For information about Cribl, see [Cribl documentation](https://docs.cribl.io/). diff --git a/docs/platform-services/automation-service/app-central/integrations/criminal-ip.md b/docs/platform-services/automation-service/app-central/integrations/criminal-ip.md index 552197dd23..07a2f78ffb 100644 --- a/docs/platform-services/automation-service/app-central/integrations/criminal-ip.md +++ b/docs/platform-services/automation-service/app-central/integrations/criminal-ip.md @@ -28,8 +28,21 @@ Criminal IP is a cybersecurity search engine that uses AI technology to scan glo ## Configure Criminal IP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Criminal IP API URL, for example, `https://api.criminalip.io` + +* **API Key**. Enter your Criminal IP API key. +* +* +* +* Criminal IP configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-discover.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-discover.md index cf5395f213..85cc3862d0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-discover.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-discover.md @@ -22,13 +22,25 @@ Updated: Jul 03, 2023*** ## Configure CrowdStrike Falcon Discover in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Label**. The desired name for the resource. - * **API URL**. `https://api.crowdstrike.com`. - * **Client ID**. The unique identifier of the API client. - * **Client Secret**. A secret code for an API client.
CrowdStrike Falcon Discover configuration +* +* **API URL**. Enter the CrowdStrike Falcon Discover API URL, for example, `https://api.crowdstrike.com` + +* **Client ID**. Enter the unique identifier of the CrowdStrike Falcon Discover API client. + +* **Client Secret**. Enter the secret code for an API client. +* +* +* +* + +CrowdStrike Falcon Discover configuration For information about CrowdStrike Falcon Discover, see [CrowdStrike documentation](https://www.crowdstrike.com/en-us/resources/guides/?lang=1). diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md index c11d2ecf1f..64cbc3bb68 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-intelligence.md @@ -51,14 +51,27 @@ Record your API client secret somewhere safe. After the credential window is clo ## Configure CrowdStrike Falcon Intelligence in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your CrowdStrike API URL. The default value is `https://api.crowdstrike.com` - * **Label**. The resource name. - * **API URL**. The default Crowdstrike API URL is [https://api.crowdstrike.com](https://api.crowdstrike.com/). - * **Client ID**. The unique identifier of the API client. The client ID is visible from the API clients table in the Falcon console. - * **Client Secret**. A secret code for an API client, equivalent to a password. The secret is only visible to you at the time the API client is created. After that, it is not retrievable. If your client secret is ever lost, you can reset it to generate a new one. - * **Member CID**. For MSSP Master CIDs, optionally lock the token to act on behalf of this member CID.
CrowdStrike Falcon Intelligence configuration +* **Client ID**. Enter the unique identifier of the API client. The client ID is visible from the API clients table in the Falcon console. + +* **Client Secret**. Enter the secret code for the API client, equivalent to a password. The secret is only visible to you at the time the API client is created. After that, it is not retrievable. If your client secret is ever lost, you can reset it to generate a new one. + +* **Member CID**. Enter the member CIS. For MSSP Master CIDs, optionally lock the token to act on behalf of this member CID. +* +* +* +* + +CrowdStrike Falcon Intelligence configuration For information about CrowdStrike Falcon Intelligence, see [CrowdStrike documentation](https://www.crowdstrike.com/en-us/resources/guides/?lang=1). diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-sandbox.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-sandbox.md index 9dacf58a74..63d40ab1bf 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-sandbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon-sandbox.md @@ -28,8 +28,23 @@ Malware Analysis Tool providing threat intelligence. ## Configure CrowdStrike Falcon Sandbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter the URL of your CrowdStrike instance, for example, `https://your-host-falcon-sandbox.com`. The default value is `https://api.crowdstrike.com` + +* **API ID**. Enter an API key for the CrowdStrike Falcon Sandbox. + +* **User Agent**. Enter a user agent for your instance of CrowdStrike Falcon Sandbox. +* +* +* +* CrowdStrike Falcon Sandbox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon.md b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon.md index 82c2bd00f9..d9e43d4091 100644 --- a/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon.md +++ b/docs/platform-services/automation-service/app-central/integrations/crowdstrike-falcon.md @@ -42,8 +42,25 @@ EDR ## Configure CrowdStrike Falcon in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your CrowdStrike Falcon API URL. + +* **User (Client) ID**. Enter the unique identifier of the API client. The client ID is visible from the API clients table in the Falcon console. + +* **User (Client) Secret**. Enter the secret code for the API client, equivalent to a password. The secret is only visible to you at the time the API client is created. After that, it is not retrievable. If your client secret is ever lost, you can reset it to generate a new one. + +* **Filter Query (Detections Daemon)**. Enter the FQL-based filter to apply to the search for the detections daemon, for example, `max_severity:>10` +* +* +* +* CrowdStrike Falcon configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cuckoo.md b/docs/platform-services/automation-service/app-central/integrations/cuckoo.md index cebb59db09..98f71a6a83 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cuckoo.md +++ b/docs/platform-services/automation-service/app-central/integrations/cuckoo.md @@ -26,8 +26,27 @@ Utilize Cuckoo sandbox to detonate potentially malicious files and URLs during a ## Configure Cuckoo in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Port**. Enter the [Cuckoo API](https://cuckoo.readthedocs.io/en/latest/usage/api/) port. + +* **URL**. Enter the Cuckoo API URL. + +* **API Key (Token)**. Enter the Cuckoo API key. + +* **Username**. Enter the username of the Cuckoo admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Cuckoo configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cyberark-aam.md b/docs/platform-services/automation-service/app-central/integrations/cyberark-aam.md index ff9fdd5ce3..fb4d51a9f2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cyberark-aam.md +++ b/docs/platform-services/automation-service/app-central/integrations/cyberark-aam.md @@ -19,8 +19,25 @@ CyberArk Application Access Manager interaction for widely used application type ## Configure CyberArk AAM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* + +* **Server**. Enter the API URL in the form `https://` where `` is the IP address or domain name of your CyberArk AAM server. + + * **Certificate**. Enter the client certificate in Base64 encoded format. This certificate contains your public key and is used to authenticate your identity to the server. If you have a combined .pem file that includes both the Certificate and the Private Key, use this field. Field requirement conditional on CyberArk. + +* **Key**. Enter the client private key in Base64 encoded format. Keep your private key confidential. It is used to securely authenticate and establish an encrypted connection. If your Private Key is included in the combined Client Certificate .pem file, leave this field empty. Field requirement conditional on CyberArk. + +* **Root**. Enter the root CA certificate in Base64 encoded format. Required if your server uses a certificate not trusted by default by your system or browser. This root certificate establishes trust with the server's SSL/TLS certificate. +* +* +* CyberArk AAM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cyberark-pam.md b/docs/platform-services/automation-service/app-central/integrations/cyberark-pam.md index 16336d977f..b93f136106 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cyberark-pam.md +++ b/docs/platform-services/automation-service/app-central/integrations/cyberark-pam.md @@ -26,16 +26,31 @@ CyberArk Privileged Access Manager (PAM) secures privileged access, centralizes ## Configure CyberArk PAM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the API URL in the form `https://` where `` is the IP address or domain name of your CyberArk PAM server. - * **Label**. The desired name for the resource. Default: CyberArk PAM resource - * **API URL**. The API URL is in the form `https://` where `` is the IP address or domain name of your CyberArk PAM server. - * **Username**. The name of the user who is logging in to the Vault. - * **Password**. The password used by the user to log in to the Vault. - * **Client Certificate**. Client Certificate in Base64 encoded format. This certificate contains your public key and is used to authenticate your identity to the server. If you have a combined .pem file that includes both the Certificate and the Private Key, use this field. Field requirement conditional on CyberArk. - * **Client Private Key**. Client Private Key in Base64 encoded format. Keep your private key confidential. It is used to securely authenticate and establish an encrypted connection. If your Private Key is included in the combined Client Certificate .pem file, leave this field empty. Field requirement conditional on CyberArk. - * **Root CA Certificate**. The Root CA Certificate in Base64 encoded format. Required if your server uses a certificate not trusted by default by your system or browser. This root certificate establishes trust with the server's SSL/TLS certificate.
cyberark-pam +* **Username**. Enter the name of the user who is logging in to the Vault. + +* **Password**. Enter the password used by the user to log in to the Vault. + +* **Certificate**. Enter the client certificate in Base64 encoded format. This certificate contains your public key and is used to authenticate your identity to the server. If you have a combined .pem file that includes both the Certificate and the Private Key, use this field. Field requirement conditional on CyberArk. + +* **Certificate Key**. Enter the client private key in Base64 encoded format. Keep your private key confidential. It is used to securely authenticate and establish an encrypted connection. If your Private Key is included in the combined Client Certificate .pem file, leave this field empty. Field requirement conditional on CyberArk. + +* **Certificate Root**. Enter the root CA certificate in Base64 encoded format. Required if your server uses a certificate not trusted by default by your system or browser. This root certificate establishes trust with the server's SSL/TLS certificate. +* +* +* +* + +cyberark-pam For information about CyberArk, see [CyberArk documentation](https://docs.cyberark.com/portal/latest/en/docs.htm). For information about CyberArk APIs, see their [REST APIs documentation](https://docs.cyberark.com/pam-self-hosted/latest/en/content/webservices/implementing%20privileged%20account%20security%20web%20services%20.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/cybereason.md b/docs/platform-services/automation-service/app-central/integrations/cybereason.md index b419d089eb..531f5243d3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cybereason.md +++ b/docs/platform-services/automation-service/app-central/integrations/cybereason.md @@ -24,8 +24,20 @@ Query Cybereason, set item reputations and work with isolation rules. ## Configure Cybereason in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Username**. Enter the username of a Cybereason admin user authorized to provide authentication for the integration. +* **Password**. Enter the password for the admin user. +* **Server URL**. Enter your Cybereason server URL. +* **Port**. Enter your Cybereason port. +* +* Cybereason configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cyberint.md b/docs/platform-services/automation-service/app-central/integrations/cyberint.md index 09408f9964..52bce5adf0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cyberint.md +++ b/docs/platform-services/automation-service/app-central/integrations/cyberint.md @@ -22,17 +22,25 @@ Cyberint offers to proactively monitor and positively impact external risk expos ## Configure Cyberint in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Instance Name Url**. Enter the domain name associated with your Cyberint instance (typically in the format `https://{instance_domain}.cyberint.io/`). - - **Label**. Unique name of the connection configuration. - - **Instance Name Url**. Domain name associated with your Cyberint instance (typically in the format `https://{instance_domain}.cyberint.io/...`). - - **API key**. API key associated with your Cyberint account. - - **Company Name**. Company (client) name associated with your Cyberint instance. - - (Optional) **Verify Server Certificate**. Validates a server’s SSL certificate. - - (Optional) **Connection Timeout (s)**. Sets the maximum amount of time an integration will wait for a server's response before terminating the connection. - - (Optional) **Automation engine**. Select **Cloud execution** (for this certified integration) or select a Bridge option (for custom integrations). - - (Optional) **Proxy Options**. Specifies the settings for routing network requests through a proxy server to manage and control internet traffic.
cyberint +* **API key**. Enter the API key associated with your Cyberint account. + +* **Company Name**. Enter the company (client) name associated with your Cyberint instance. +* +* +* +* + +cyberint For information about Cyberint, see the [Cyberint website](https://cyberint.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/cybersecurity-help.md b/docs/platform-services/automation-service/app-central/integrations/cybersecurity-help.md index fdd16d5424..9b74121373 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cybersecurity-help.md +++ b/docs/platform-services/automation-service/app-central/integrations/cybersecurity-help.md @@ -34,12 +34,23 @@ Cybersecurity Help is a global vulnerability intelligence provider. ## Configure Cybersecurity Help in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter you Cybersecurity Help URL. The default value is `https://www.cybersecurity-help.cz` - * **Label**. The desired name for the resource. - * **URL**. The default Cybersecurity Help url is [https://www.cybersecurity-help.cz](https://www.cybersecurity-help.cz/). - * **Token**. Your Cybersecurity Help token you copied earlier from Cybersecurity Help.
Cybersecurity Help configuration +* **Token**. Enter the Cybersecurity Help token you [copied earlier](#cybersecurity-help-configuration). +* +* +* +* + +Cybersecurity Help configuration For information about Cybersecurity Help, see the [Cybersecurity Help website](https://www.cybersecurity-help.cz/). diff --git a/docs/platform-services/automation-service/app-central/integrations/cybertriage.md b/docs/platform-services/automation-service/app-central/integrations/cybertriage.md index ac2dcc0686..a142c875dc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cybertriage.md +++ b/docs/platform-services/automation-service/app-central/integrations/cybertriage.md @@ -18,8 +18,28 @@ Initiate the triage of endpoints with Cyber Triage from Basis Technology. ## Configure Cyber Triage in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Hostname of Cyber Triage server**. + +* **REST Port**. Enter your [Cyber Triage port](https://docs.cybertriage.com/en/latest/chapters/team/index.html#rest-api-access). + +* **API Key**. Enter your [Cyber Triage API key](https://docs.cybertriage.com/en/latest/chapters/team/index.html#api-user). + +* **Windows Domain**. Enter the Windows domain associated with your Cyber Triage instance. + +* **Windows Admin Account**. Enter the Windows admin account associated with your Cyber Triage instance. + +* **Password**. Enter the password for the Windows admin account. +* +* +* Cyber Triage configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/cylanceprotect.md b/docs/platform-services/automation-service/app-central/integrations/cylanceprotect.md index 2b00b0386c..f593f4c252 100644 --- a/docs/platform-services/automation-service/app-central/integrations/cylanceprotect.md +++ b/docs/platform-services/automation-service/app-central/integrations/cylanceprotect.md @@ -31,19 +31,16 @@ Query CylanceProtect, enrich data and contain threats through devices, zones, po * **Delete from Global List** (*Containment*) - Delete the specified hash from a global list. * **Update Device Threat** (*Containment*) - Update a device threat with the specified information. -## CylanceProtect Configuration +## CylanceProtect configuration To retrieve the API Credentials, refer to the following [guide](https://docs.blackberry.com/en/unified-endpoint-security/blackberry-ues/Cylance-API-user-guide/Application_Management/To_Add_an_Application).
cylanceprotect
cylanceprotect -API URL: +### API URL The Auth API will be accessed via the following base endpoint: - -North America: *https://protectapi.cylance.com/* - -US Government: *https://protectapi.us.cylance.com/* - -All Other Regions: *https://protectapi-{region-code}.cylance.com/* +* North America: `https://protectapi.cylance.com/` +* US Government: `https://protectapi.us.cylance.com/` +* All Other Regions: `https://protectapi-{region-code}.cylance.com/` cylanceprotect @@ -54,8 +51,25 @@ All Other Regions: *https://protectapi-{region-code}.cylance.com/* ## Configure CylanceProtect in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [CylanceProtect API URL](#api-url), for example, `https://protectapi.cylance.com` + +* **Tenant ID**. Enter the CylanceProtect tenant ID you [copied earlier](#cylanceprotect-configuration). + +* **Application ID**. Enter your CylanceProtect application ID that you [copied earlier](#cylanceprotect-configuration). + +* **Application Secret**. Enter the secret for the application ID. +* +* +* +* Cylance Protect configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/darkowl.md b/docs/platform-services/automation-service/app-central/integrations/darkowl.md index 9edcf25934..ca2dbf9225 100644 --- a/docs/platform-services/automation-service/app-central/integrations/darkowl.md +++ b/docs/platform-services/automation-service/app-central/integrations/darkowl.md @@ -20,8 +20,22 @@ Perform threat intelligence evidence gathering with DarkOwl. ## Configure DarkOwl in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **IP/Hostname**. Enter your DarkOwl server IP address or hostname. + +* **Public Key**. Enter a DarkOwl public key. + +* **Private Key**. Enter a DarkOwl private key. +* +* +* DarkOwl configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/darktrace.md b/docs/platform-services/automation-service/app-central/integrations/darktrace.md index c224a7d9c0..e399dec4c0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/darktrace.md +++ b/docs/platform-services/automation-service/app-central/integrations/darktrace.md @@ -26,15 +26,32 @@ Perform threat intelligence evidence gathering with Darktrace. * **Search Breach** *(Enrichment)* - Query breaches from Darktrace. * **Search Devices** *(Enrichment)* - Search capacity to interrogate the list of devices has seen on the network. -## Configure DarkTrace in Automation Service and Cloud SOAR +## Configure Darktrace in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Darktrace server URL. -DarkTrace configuration +* **Public Key**. Enter a Darktrace public key. -For information about DarkTrace, see the [DarkTrace website](https://www.darktrace.com/). +* **Private Key**. Enter the private key corresponding to the public key. +* +* +* **Darktrace Minutes**. Enter your Darktrace minutes setting, for example, `10`. + +* +* + +Darktrace configuration + +For information about Darktrace, see the [Darktrace website](https://www.darktrace.com/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/datto-rmm.md b/docs/platform-services/automation-service/app-central/integrations/datto-rmm.md index 9a04e86a68..30ffb03971 100644 --- a/docs/platform-services/automation-service/app-central/integrations/datto-rmm.md +++ b/docs/platform-services/automation-service/app-central/integrations/datto-rmm.md @@ -24,8 +24,24 @@ This integration streamlines IT tasks with rapid job creation, data retrieval, a ## Configure Datto RMM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Datto RMM Platform**. Enter your [Datto RMM platform](https://rmm.datto.com/help/en/Content/1INTRODUCTION/Infrastructure/Platforms.htm). The API URL will be generated automatically based on the selected Datto RMM platform. + +* **Access Key**. Enter a [Datto RMM access key](https://rmm.datto.com/help/en/Content/2SETUP/APIv2.htm). + +* **Secret Key**. Enter the secret corresponding to the access key. + +* +* +* +* Datto RMM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/devo.md b/docs/platform-services/automation-service/app-central/integrations/devo.md index cd9a233563..a43147c3a2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/devo.md +++ b/docs/platform-services/automation-service/app-central/integrations/devo.md @@ -19,8 +19,23 @@ DEVO integration to query data from Devo. ## Configure Devo in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Devo Domain**. Enter your [Devo domain](https://docs.devo.com/space/latest/94762877/Domain+administration). + +* **API Key**. Enter a Devo [access key](https://docs.devo.com/space/latest/94763781/Access+keys). + +* **Secret Key**. Enter the secret for the access key. +* +* +* +* Devo configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/digital-shadows.md b/docs/platform-services/automation-service/app-central/integrations/digital-shadows.md index 04d0e01d54..f62bd2760b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/digital-shadows.md +++ b/docs/platform-services/automation-service/app-central/integrations/digital-shadows.md @@ -18,8 +18,19 @@ Query Digital Shadows threat intelligence. ## Configure Digital Shadows in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Key**. Enter a Digital Shadows key. + +* **Secret**. Enter the secret for the key. +* +* Digital Shadows configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/domain-dossier.md b/docs/platform-services/automation-service/app-central/integrations/domain-dossier.md index b28ff8e591..198bcd9d2a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/domain-dossier.md +++ b/docs/platform-services/automation-service/app-central/integrations/domain-dossier.md @@ -18,8 +18,23 @@ Perform WHOIS queries with Domain Dossier. ## Configure Domain Dossier in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter a Domain Dossier endpoint address. + +* **Username**. Enter the username of a Domain Dossier admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Domain Dossier configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/domaintools.md b/docs/platform-services/automation-service/app-central/integrations/domaintools.md index d085a5e778..ba3e079541 100644 --- a/docs/platform-services/automation-service/app-central/integrations/domaintools.md +++ b/docs/platform-services/automation-service/app-central/integrations/domaintools.md @@ -28,8 +28,21 @@ Threat Intelligence-Reputation ## Configure DomainTools in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Username**. Enter the username of a DomainTools admin user authorized to provide authentication for the integration. + +* **API Key**. Enter a DomainTools API key. +* +* +* +* DomainTools configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/downdetector.md b/docs/platform-services/automation-service/app-central/integrations/downdetector.md index 456c2dd695..899608a891 100644 --- a/docs/platform-services/automation-service/app-central/integrations/downdetector.md +++ b/docs/platform-services/automation-service/app-central/integrations/downdetector.md @@ -31,12 +31,25 @@ Updated: Jul 06, 2023*** ## Configure Downdetector in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Downdetector API URL. The default value is `https://downdetectorapi.com` - * **URL**. Default value for API URL is 'https://downdetectorapi.com'. - * **Username**. The client ID that you copied as username. - * **Password**. The Client Secret that you copied as password.
Downdetector configuration gray'}} alt="downdetector" width="400"/> +* **Username**. Enter the client ID that you [copied earlier](#downdetector-configuration). + +* **Password**. Enter the client secret that you copied earlier. +* +* +* +* + +Downdetector configuration gray'}} alt="downdetector" width="400"/> For information about Downdetector, see [Downdetector documentation](https://downdetectorapi.com/v2/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/dropbox.md b/docs/platform-services/automation-service/app-central/integrations/dropbox.md index 4499620430..cd9477b180 100644 --- a/docs/platform-services/automation-service/app-central/integrations/dropbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/dropbox.md @@ -24,11 +24,23 @@ Follow the [link](https://www.dropbox.com/developers/reference/getting-started#a ## Configure Dropbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Dropbox API URL, for example, `https://api.dropboxapi.com` - * **API URL**. 'https://api.dropboxapi.com'. - * **Token**. Insert copied token.
Dropbox configuration +* **Token**. Enter a [Dropbox token](https://www.dropbox.com/developers/documentation/http/documentation#authorization). +* +* +* +* + +Dropbox configuration For information about Dropbox, see [Dropbox documentation](https://www.dropbox.com/developers/documentation). diff --git a/docs/platform-services/automation-service/app-central/integrations/druva.md b/docs/platform-services/automation-service/app-central/integrations/druva.md index 34a4d16a7b..b958911607 100644 --- a/docs/platform-services/automation-service/app-central/integrations/druva.md +++ b/docs/platform-services/automation-service/app-central/integrations/druva.md @@ -27,8 +27,23 @@ Updated: April 4, 2024*** ## Configure Druva in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Druva API URL, for example, `https://apis.druva.com` + +* **Client ID**. Enter a [Druva client ID](https://help.druva.com/en/articles/8580838-create-and-manage-api-credentials). + +* **Secret Key**. Enter the secret for the client ID. +* +* +* +* Druva configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/duo.md b/docs/platform-services/automation-service/app-central/integrations/duo.md index 8999931f9a..9105bb6972 100644 --- a/docs/platform-services/automation-service/app-central/integrations/duo.md +++ b/docs/platform-services/automation-service/app-central/integrations/duo.md @@ -27,8 +27,22 @@ Follow this [link](https://duo.com/docs/adminapi) for configuration purposes:
+* +* **API Hostname**. Enter your Duo [API hostname](https://duo.com/docs/adminapi#api-details). + +* **Integration Key**. Enter a Duo [integration key](https://duo.com/docs/adminapi#first-steps). + +* **Secret Key**. Enter the secret for the integration key. +* +* +* Duo configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/dynatrace.md b/docs/platform-services/automation-service/app-central/integrations/dynatrace.md index f0e2c671a2..4c632d56e3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/dynatrace.md +++ b/docs/platform-services/automation-service/app-central/integrations/dynatrace.md @@ -27,7 +27,9 @@ Dynatrace is a cutting-edge solution that offers full-stack monitoring, enabling * **Search Security Problems Daemon** *(Daemon)* - Automatically returns latest security problems. * **Unmute Security Problem** *(Containment)* - Unmutes the specified security problem. -**Timeframe** +## Data format + +### Timeframe You can use one of the following formats for timeframe: @@ -41,7 +43,7 @@ You can use one of the following formats for timeframe: + M: months + y: years -**Event Selector** +### Event Selector Defines the scope of the query. Only events matching the specified criteria are included in the response. @@ -59,7 +61,7 @@ Defines the scope of the query. Only events matching the specified criteria are To set several criteria, separate them with commas (,). Only results matching all criteria are included in the response. -**Entity Selector** +### Entity Selector The entity scope of the query. You must set one of these criteria: @@ -93,7 +95,7 @@ The length of the string is limited to 10,000 characters. The number of entities that can be selected is limited to 10000. -**Metric Selector** +### Metric Selector You can specify multiple metric keys separated by commas (for example, metrickey1,metrickey2). To select multiple metrics belonging to the same parent, list the last part of the required metric keys in parentheses, separated by commas, while keeping the common part untouched. For example, to list the builtin:host.cpu.idle and builtin:host.cpu.user metric, write: builtin:host.cpu.(idle,user). @@ -114,14 +116,14 @@ For example, to query the metric with the key of ext:selfmonitoring.jmx.Agents: To find metrics based on a search term, rather than metricId, use the text query parameter instead of this one. -**Log Search** +### Log Search The log search query. The query must use the [Dynatrace search query language](https://www.dynatrace.com/support/help/how-to-use-dynatrace/log-monitoring/analyze-log-data/log-viewer#sql). The query has a limit of 20 relations (logical operators between simple expressions (AND, OR) or comparison operators (=, !=, <, <=, >, >=) in simple expressions). -**Dynatrace documentation** +### Dynatrace documentation More information can be found [here](https://www.dynatrace.com/support/help). @@ -143,8 +145,21 @@ To be authenticated to use the Dynatrace API, you need a valid access token. To ## Configure Dynatrace in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Dynatrace server URL. + +* **API Token**. Enter the Dynatrace API token you [created earlier](#dynatrace-configuration). +* +* +* +* Dynatrace configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/eclecticiq.md b/docs/platform-services/automation-service/app-central/integrations/eclecticiq.md index f37ab6b5a0..3ba0b37128 100644 --- a/docs/platform-services/automation-service/app-central/integrations/eclecticiq.md +++ b/docs/platform-services/automation-service/app-central/integrations/eclecticiq.md @@ -30,12 +30,27 @@ State-of-the-art CTI technology for large enterprises, governments, and MSSPs. ## Configure EclecticIQ in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL for your EclecticIQ instance. + +* **API Token**. Enter an EclecticIQ [API token](https://docs.eclecticiq.com/ic/2.13.0/Create_an_API_token.html). + +* **API Version**. Enter the EclecticIQ API version number. +* +* +* +* EclecticIQ configuration -For information about EclecticIQ, see the [EclecticIQ website](https://www.eclecticiq.com/library). +For information about EclecticIQ, see the [EclecticIQ documentation](https://docs.eclecticiq.com/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/elastic-security.md b/docs/platform-services/automation-service/app-central/integrations/elastic-security.md index df1dd92b23..b219631ef6 100644 --- a/docs/platform-services/automation-service/app-central/integrations/elastic-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/elastic-security.md @@ -42,8 +42,26 @@ Elastic Security equips analysts to prevent, detect, and respond to threats. The ## Configure Elastic Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Elastic Security [hostname](https://www.elastic.co/docs/solutions/security/explore/hosts-page). + +* **Port**. Enter the [port](https://www.elastic.co/docs/reference/elasticsearch/configuration-reference/networking-settings) on which Elasticsearch is listening for HTTP traffic. The port is by default 9200. + +* **Username**. Enter the username of an Elastic admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* **Container ID for Daemon**. Enter the [container ID](https://www.elastic.co/docs/reference/ecs/ecs-container#field-container-id). + +* +* Elastic Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/elasticsearch-v2.md b/docs/platform-services/automation-service/app-central/integrations/elasticsearch-v2.md index cdcb898c50..d4ae8649a3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/elasticsearch-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/elasticsearch-v2.md @@ -19,7 +19,7 @@ Query Elasticsearch * **Get Indices Fields Mappings** (*Enrichment*) - Get a list for fields mappings from Elasticsearch. * **Query Extended** (*Enrichment*) - Elasticsearch Query working with hidden Indices. -## Elasticsearch Ccnfiguration +## Elasticsearch Configuration To retrieve the API Credentials, refer to the [guide](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-create-api-key.html). @@ -35,8 +35,26 @@ On the deployment overview page, copy down the **Cloud ID**.
+* +* **Server Type**. Select the type of verification depending on the type of Elasticsearch server you use, either [hosted](https://www.elastic.co/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted) (select **Hosts**) or [cloud](https://www.elastic.co/docs/deploy-manage/deploy/elastic-cloud) (select **Cloud ID**). + +* **Host or Cloud ID**. Enter your Elasticsearch [hostname](https://www.elastic.co/docs/reference/elasticsearch/configuration-reference/networking-settings) (if you selected **Hosts** above) or the [cloud ID](https://www.elastic.co/docs/solutions/search/search-connection-details) (if you selected **Cloud ID**). + +* **Authentication Type**. Select **Basic Authentication**, **No Authentication**, or **API Key**. + +* **User or API ID**. Enter an Elasticsearch admin username (if you selected **Basic Authentication** above) or enter an Elasticsearch [API ID](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) (if you selected **API Key** above). + +* **Password or API Key**. Enter the admin user password (if you selected **Basic Authentication** above) or enter the [API key](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) corresponding to the API ID (if you selected **API Key** above). +* +* +* Elasticsearch V2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/energylogserver.md b/docs/platform-services/automation-service/app-central/integrations/energylogserver.md index 1d47ecbf6d..768f2a8548 100644 --- a/docs/platform-services/automation-service/app-central/integrations/energylogserver.md +++ b/docs/platform-services/automation-service/app-central/integrations/energylogserver.md @@ -26,8 +26,29 @@ Query Energy Logserver by using Elasticsearch API. ## Configure Energy Logserver in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +:::note +Energy Logserver uses Elasticsearch for its framework, and uses many of the same settings. +::: +* +* **Server Type**. Select the type of verification depending on the type of Energy Logserver server you use, either [hosted](https://www.elastic.co/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted) (select **Hosts**) or [cloud](https://www.elastic.co/docs/deploy-manage/deploy/elastic-cloud) (select **Cloud ID**). + +* **Host or Cloud ID**. Enter your Energy Logserver [hostname](https://www.elastic.co/docs/reference/elasticsearch/configuration-reference/networking-settings) (if you selected **Hosts** above) or the [cloud ID](https://www.elastic.co/docs/solutions/search/search-connection-details) (if you selected **Cloud ID**). + +* **Authentication Type**. Select **Basic Authentication**, **No Authentication**, or **API Key**. + +* **User or API ID**. Enter an Energy Logserver admin username (if you selected **Basic Authentication** above) or enter an Energy Logserver [API ID](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) (if you selected **API Key** above). + +* **Password or API Key**. Enter the admin user password (if you selected **Basic Authentication** above) or enter the [API key](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) corresponding to the API ID (if you selected **API Key** above). +* +* +* Energy Logserver configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ermes.md b/docs/platform-services/automation-service/app-central/integrations/ermes.md index 5ba534961e..adbca5617c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ermes.md +++ b/docs/platform-services/automation-service/app-central/integrations/ermes.md @@ -18,11 +18,25 @@ Ermes Intelligent Web Protection offers dynamic web threat protection based on t ## Configure Ermes in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Client ID**. Your client\_id. - * **Client Secret**. Your client\_secret.
Ermes configuration +* +* **URL**. Enter your Ermes URL. + +* **Client ID**. Enter an Ermes client ID. + +* **Client Secret** Enter the secret for the Ermes client ID. +* +* +* +* + +Ermes configuration For information about Ermes, see the [Ermes website](https://www.ermes.company/). diff --git a/docs/platform-services/automation-service/app-central/integrations/esmtp.md b/docs/platform-services/automation-service/app-central/integrations/esmtp.md index 3ffe1609ca..e9fb5858a0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/esmtp.md +++ b/docs/platform-services/automation-service/app-central/integrations/esmtp.md @@ -22,8 +22,29 @@ Allows you to connect your mailbox with Cloud SOAR and send emails via ESMTP. ## Configure ESMTP in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **SMTP Server**. Enter your SMTP server name. + +* **Port**. Enter your SMTP port. + +* **Email account**. Enter the email account to use for providing authentication for the integration. + +* **Password**. Enter the password for the email account. +* +* +* +* +* EMSTP configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/exploit-database.md b/docs/platform-services/automation-service/app-central/integrations/exploit-database.md index 39993da1f9..626b279431 100644 --- a/docs/platform-services/automation-service/app-central/integrations/exploit-database.md +++ b/docs/platform-services/automation-service/app-central/integrations/exploit-database.md @@ -18,8 +18,20 @@ Exploit Database, a CVE compliant archive of public exploits and corresponding v ## Configure Exploit Database in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Exploit Database hostname. + +* +* +* +* Exploit Database configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/f5-as3.md b/docs/platform-services/automation-service/app-central/integrations/f5-as3.md index 811bcdeee2..bc54cdf783 100644 --- a/docs/platform-services/automation-service/app-central/integrations/f5-as3.md +++ b/docs/platform-services/automation-service/app-central/integrations/f5-as3.md @@ -18,8 +18,21 @@ Manipulate F5 AS3 configurations during an active investigation. ## Configure F5 AS3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your F5 AS3 server URL. + +* **Username**. Enter the username of an F5 AS3 admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* F5 AS3 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/f5-awaf.md b/docs/platform-services/automation-service/app-central/integrations/f5-awaf.md index a8f766f5df..f632dc4ac0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/f5-awaf.md +++ b/docs/platform-services/automation-service/app-central/integrations/f5-awaf.md @@ -35,11 +35,25 @@ F5 AWAF protects apps with behavioural analytics, proactive bot defence, and app ## Configure F5 AWAF in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Host**. IP where F5 AWAF is installed. - * **Username and Password**
F5 AWAF configuration +* +* **Host**. Enter the IP address where F5 AWAF is installed. + +* **Username**. Enter the username of an F5 AWAF admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +F5 AWAF configuration For information about F5 AWAF, see [F5 AWAF documentation](https://docs.cloud.f5.com/docs-v2/web-app-and-api-protection/how-to/app-security/application-firewall). diff --git a/docs/platform-services/automation-service/app-central/integrations/farsight-security-dnsdb.md b/docs/platform-services/automation-service/app-central/integrations/farsight-security-dnsdb.md index 45e419ae89..a915ff8299 100644 --- a/docs/platform-services/automation-service/app-central/integrations/farsight-security-dnsdb.md +++ b/docs/platform-services/automation-service/app-central/integrations/farsight-security-dnsdb.md @@ -24,11 +24,23 @@ Request your API Key from [https://www.farsightsecurity.com/solutions/dnsdb](htt ## Configure Farsight Security DNSDB in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL API**. Enter the Farsight Security API URL, for example, `https://api.dnsdb.info/` - * **URL API**. `https://api.dnsdb.info/`. - * **API Key**. Your API Key.
Farsight Security configuration +* **API Key**. Enter the Farsight Security API key you [requested earlier](#farsight-security-dnsdb-configuration). +* +* +* +* + +Farsight Security configuration For information about Farsight Security DNSDB, see [Farsight Security DNSDB documentation](https://www.domaintools.com/resources/user-guides/farsight-dnsdb-api-version-2-documentation/). diff --git a/docs/platform-services/automation-service/app-central/integrations/fastah-ip-geolocation.md b/docs/platform-services/automation-service/app-central/integrations/fastah-ip-geolocation.md index 942684d7a6..30b36c19cc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fastah-ip-geolocation.md +++ b/docs/platform-services/automation-service/app-central/integrations/fastah-ip-geolocation.md @@ -22,12 +22,23 @@ Sign in to [Fastah API Developer Console](https://docs.getfastah.com/docs/using- ## Configure Fastah IP Geolocation in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Fastah API URL, for example, `https://ep.api.getfastah.com/whereis/v1/json` - * **Label**. The name of the resource. - * **Host**. `https://ep.api.getfastah.com/whereis/v1/json`. - * **Token**. The primary key you have copied from Fastah API Developers Console.
Fastah IP Geolocation configuration +* **Token**. Enter the primary key you copied from the Fastah API Developers Console [above](#fastah-ip-geolocation-configuration). +* +* +* +* + +Fastah IP Geolocation configuration For information about Fastah IP Geolocation, see [Fastah IP Geolocation documentation](https://docs.getfastah.com/docs/quick-start). diff --git a/docs/platform-services/automation-service/app-central/integrations/fidelis-elevate-network.md b/docs/platform-services/automation-service/app-central/integrations/fidelis-elevate-network.md index f0371ec40f..602d6e55fe 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fidelis-elevate-network.md +++ b/docs/platform-services/automation-service/app-central/integrations/fidelis-elevate-network.md @@ -24,8 +24,21 @@ Search alerts and retrieve analysis details from Fidelis Network Elevate. ## Configure Fidelis Elevate Network in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL of your Fidelis instance. + +* **User Name**. Enter the username of a Fidelis admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* Fidelis Elevate configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-ax.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-ax.md index 4180f52c42..7c0e01b72c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-ax.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-ax.md @@ -19,8 +19,25 @@ Inspect malicious files using FireEye AX. ## Configure FireEye AX in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter the FireEye AX endpoint URL. + +* **Username**. Enter the username of a FireEye AX admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **API Version**. Select the API version, 2.0.0 or 1.2.0. +* +* +* +* FireEye AX configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-central-management-cm.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-central-management-cm.md index 8dbf53b9d8..e0971ae60f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-central-management-cm.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-central-management-cm.md @@ -23,8 +23,25 @@ Centralized device and intelligence management to correlate data across attack v ## Configure FireEye Central Management (CM) in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter the FireEye CM endpoint URL. + +* **Username**. Enter the username of a FireEye CM admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **API Version**. Select the API version, 2.0.0 or 1.2.0. +* +* +* +* FireEye Central Management configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-email-security-ex.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-email-security-ex.md index dd6f87e0d9..aec8226ac4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-email-security-ex.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-email-security-ex.md @@ -20,8 +20,25 @@ Full stack email security solution for email analysis. ## Configure FireEye Email Security (EX) in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter the FireEye EX endpoint URL. + +* **Username**. Enter the username of a FireEye EX admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **API Version**. Select the API version, 2.0.0 or 1.2.0. +* +* +* +* FireEye Email Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-endpoint-security-hx.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-endpoint-security-hx.md index bae9f5bcf5..66f77429c5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-endpoint-security-hx.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-endpoint-security-hx.md @@ -24,8 +24,25 @@ Interact with FireEye Endpoint Security (HX) during incident investigations. ## Configure FireEye Endpoint Security (HX) in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the hostname for your FireEye HX instance. + +* **Port Number**. Enter the port number for your FireEye HX instance. + +* **Username**. Enter the username of a FireEye HX admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* FireEye Endpoint Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-helix.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-helix.md index 9722f94dff..92fb834c80 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-helix.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-helix.md @@ -34,8 +34,23 @@ Query FireEye Helix to gather enrichment data during an incident investigation. ## Configure FireEye Helix in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter the FireEye Helix endpoint URL. + +* **API Key**. Enter a FireEye Helix [API key](https://docs.trellix.com/bundle/helix_pg/page/UUID-76e07a89-b6c5-6fb0-3201-34fe0b1eb717.html). +* +* +* **FireEye Helix Timezone (Daemon)**. Select your timezone. + +* +* FireEye Helix configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fireeye-network-security-nx.md b/docs/platform-services/automation-service/app-central/integrations/fireeye-network-security-nx.md index a28d80b93c..e2ca8094de 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fireeye-network-security-nx.md +++ b/docs/platform-services/automation-service/app-central/integrations/fireeye-network-security-nx.md @@ -22,8 +22,21 @@ Advanced network security solution for network traffic analysis. ## Configure FireEye Network Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter the server URL for your FireEye Network Security instance. + +* **Username**. Enter the username of a FireEye Network Security admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* FireEye Network Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/firehydrant.md b/docs/platform-services/automation-service/app-central/integrations/firehydrant.md index 7cfe1d513b..b235abdf77 100644 --- a/docs/platform-services/automation-service/app-central/integrations/firehydrant.md +++ b/docs/platform-services/automation-service/app-central/integrations/firehydrant.md @@ -28,17 +28,29 @@ Updated: Jul 18, 2023*** ## FireHydrant configuration -1. Login to **FireHydrant** with your email and password and refer to the Bot users page.
firehydrant -1. Create your token and use as [API Key](https://docs.firehydrant.com/docs/api-keys). Make sure you click to copy the token, it will not be shown again. +1. Login to **FireHydrant** with your email and password and refer to the Bot users page.
firehydrant +1. Create your token and use as an [API Key](https://docs.firehydrant.com/docs/api-keys). Make sure you click to copy the token; it will not be shown again. ## Configure FireHydrant in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your FireHydrant API URL. The default value is `https://api.firehydrant.io` - * **URL**. Default value for API URL is 'https://api.firehydrant.io'. - * **API Key**. The API Key you copied earlier.
Firehydrant configuration +* **API Key**. Enter the [API key](https://docs.firehydrant.com/docs/api-keys) you [copied earlier](#firehydrant-configuration). +* +* +* +* + +Firehydrant configuration For information about FireHydrant, see [FireHydrant documentation](https://docs.firehydrant.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/flowmon.md b/docs/platform-services/automation-service/app-central/integrations/flowmon.md index cbde7e6a16..22f5d7e280 100644 --- a/docs/platform-services/automation-service/app-central/integrations/flowmon.md +++ b/docs/platform-services/automation-service/app-central/integrations/flowmon.md @@ -20,8 +20,25 @@ Network performance monitoring and network security products, Flowmon is utilizi ## Configure Flowmon in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the hostname for your Flowmon instance. + +* **Username**. Enter the username of a Flowmon admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Client ID**. Enter a Flowmon client ID. +* +* +* +* Flowmon configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/forcepoint-web-security.md b/docs/platform-services/automation-service/app-central/integrations/forcepoint-web-security.md index 1230bf5797..02858f0b1f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/forcepoint-web-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/forcepoint-web-security.md @@ -27,8 +27,23 @@ Forcepoint Web Security is a flexible web protection solution that provides fine ## Configure Forcepoint Web Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Forcepoint server URL. + +* **API Username**. Enter the username of a Forcepoint admin user authorized to authenticate the integration. + +* **API Password**. Enter the password for the admin user. +* +* +* +* Forcepoint configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/forescout-eyesight.md b/docs/platform-services/automation-service/app-central/integrations/forescout-eyesight.md index 42f47b180c..d8fac3bb3b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/forescout-eyesight.md +++ b/docs/platform-services/automation-service/app-central/integrations/forescout-eyesight.md @@ -25,12 +25,25 @@ To configure Web API follow this [link](https://docs.forescout.com/bundle/web-ap ## Configure Forescout eyeSight in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Enterprise Manager IP**. Enter your Forescout eyeSight IP address. - * **Enterprise Manager IP**. Forescout eyeSight IP - * **User** - * **Password**
Forescout eyeSight configuration +* **User**. Enter the username of a Forescout admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +Forescout eyeSight configuration For information about Forescout eyeSight, see [Forescout documentation](https://docs.forescout.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/fortianalyzer.md b/docs/platform-services/automation-service/app-central/integrations/fortianalyzer.md index 152d0a04cb..add5682ae8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortianalyzer.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortianalyzer.md @@ -27,8 +27,26 @@ Search events and network traffic from Fortinet FortiAnalyzer. ## Configure FortiAnalyzer in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your FortiAnalyzer API URL, for example, `https://192.168.0.10/jsonrpc` + +* **Username**. Enter the username of a FortiAnalyzer admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **ADOM Name (Daemon)**. Enter your FortiAnalyzer [ADOM name](https://docs.fortinet.com/document/fortianalyzer/7.6.0/administration-guide/718923/root-adom). + +* +* +* +* FortiAnalyzer configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortigate.md b/docs/platform-services/automation-service/app-central/integrations/fortigate.md index a188d1f677..e61d63fc49 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortigate.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortigate.md @@ -35,8 +35,21 @@ Work with Addresses, Policies and Services in Fortinet FortiGate. ## Configure FortiGate in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter the server URL for your FortiGate instance. + +* **Token**. Enter a FortiGate [token](https://docs.fortinet.com/document/fortigate/7.6.2/cli-reference/214143909/execute-gen-token). +* +* +* +* FortiGate configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortimail.md b/docs/platform-services/automation-service/app-central/integrations/fortimail.md index bdbc99dee5..910697bf12 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortimail.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortimail.md @@ -27,8 +27,21 @@ Work with Access Rules, Domains, IP Policies and Recipient Policies in Fortinet ## Configure FortiMail in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your FortiMail server URL. + +* **Username**. Enter the username of a FortiMail admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* FortiMail configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortiproxy.md b/docs/platform-services/automation-service/app-central/integrations/fortiproxy.md index e7a325b47a..c24d47f671 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortiproxy.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortiproxy.md @@ -36,8 +36,21 @@ Fortinet FortiProxy is a secure web proxy that protects employees against intern ## Configure FortiProxy in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your FortiProxy hostname. + +* **API Token**. Enter a FortiProxy API [token](https://docs.fortinet.com/document/fortiproxy/7.4.4/administration-guide/532254/registering-and-activating-a-hard-token). +* +* +* +* FortiProxy configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortisandbox.md b/docs/platform-services/automation-service/app-central/integrations/fortisandbox.md index 5a76b2b0e8..a72c36b40a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortisandbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortisandbox.md @@ -25,8 +25,23 @@ Fortinet FortiSandbox is a detection tool with threat prevention capabilities, w ## Configure FortiSandbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your FortiSandbox server URL. + +* **Username**. Enter the username of a FortiSandbox admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* FortiSandbox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortisiem.md b/docs/platform-services/automation-service/app-central/integrations/fortisiem.md index 14260ed9d0..9f7a2c4cfd 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortisiem.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortisiem.md @@ -24,8 +24,23 @@ Search events and retrieve device details from Fortinet FortiSIEM. ## Configure FortiSIEM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your FortiSIEM server URL. + +* **Username**. Enter the username of a FortiSIEM admin user authorized to authenticate the integration. Use the format organization name / username (for example, `super/admin`). + +* **Password**. Enter the password for the admin user. +* +* +* +* FortiSIEM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortiweb-v2.md b/docs/platform-services/automation-service/app-central/integrations/fortiweb-v2.md index ef9cbeaeab..be865993fc 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortiweb-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortiweb-v2.md @@ -36,8 +36,29 @@ List and create policies and rules with Fortinet FortiWeb. ## Configure FortiWeb V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the [hostname](https://docs.fortinet.com/document/fortiweb/7.6.2/administration-guide/307213/changing-the-fortiweb-appliance-s-host-name) for your FortiWeb instance, for example, `10.200.10.104` + +* **Protocol**. Select the protocol, `https` or `http`. + +* **Port**. Enter your FortiWeb [port number](https://docs.fortinet.com/document/fortiweb/7.6.3/administration-guide/806024/appendix-a-port-numbers). + +* **Username**. Enter the username of a FortiWeb admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Vdom**. Enter your FortiWeb [virtual domain](https://docs.fortinet.com/document/fortiadc/7.4.3/handbook/442832/virtual-domain-vdom-and-administrative-domain-adom-overview). +* +* +* +* FortiWeb V2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/fortiweb.md b/docs/platform-services/automation-service/app-central/integrations/fortiweb.md index 4819f97cec..ab332b7875 100644 --- a/docs/platform-services/automation-service/app-central/integrations/fortiweb.md +++ b/docs/platform-services/automation-service/app-central/integrations/fortiweb.md @@ -38,8 +38,27 @@ List and create policies and rules with Fortinet FortiWeb. ## Configure FortiWeb in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the [hostname](https://docs.fortinet.com/document/fortiweb/7.6.2/administration-guide/307213/changing-the-fortiweb-appliance-s-host-name) for your FortiWeb instance, for example, `10.200.10.104` + +* **Username**. Enter the username of a FortiWeb admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Protocol**. Select the protocol, `https` or `http`. + +* **Port**. Enter your FortiWeb [port number](https://docs.fortinet.com/document/fortiweb/7.6.3/administration-guide/806024/appendix-a-port-numbers). +* +* +* +* FortiWeb configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/freshdesk.md b/docs/platform-services/automation-service/app-central/integrations/freshdesk.md index bff173ab70..5420fa6d90 100644 --- a/docs/platform-services/automation-service/app-central/integrations/freshdesk.md +++ b/docs/platform-services/automation-service/app-central/integrations/freshdesk.md @@ -1,5 +1,5 @@ --- -title: FreshDesk +title: Freshdesk description: '' --- import useBaseUrl from '@docusaurus/useBaseUrl'; @@ -9,7 +9,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; ***Version: 1.1 Updated: Jun 30, 2023*** -Interact with FreshDesk contacts and tickets. +Interact with Freshdesk contacts and tickets. ## Actions @@ -23,20 +23,35 @@ Interact with FreshDesk contacts and tickets. * **Get All Tickets** (*Enrichment*) - Get all tickets. * **Add Reply** (*Containment*) - Add a replay to an existing conversation. * **Create Note** (*Containment*) - Create a new note. -* **Create Ticket On FreshDesk** (*Containment*) - Create a new ticket in FreshDesk. +* **Create Ticket On Freshdesk** (*Containment*) - Create a new ticket in Freshdesk. * **Create Ticket With Attachment** (*Containment*) - Create a new ticket with an attachment. * **Delete Ticket** (*Containment*) - Delete an existing ticket. -* **Update Ticket On FreshDesk** (*Containment*) - Update a specific ticket in FreshDesk. +* **Update Ticket On Freshdesk** (*Containment*) - Update a specific ticket in Freshdesk. -## Configure FreshDesk in Automation Service and Cloud SOAR +## Configure Freshdesk in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Domain**. Enter your Freshdesk [domain](https://crmsupport.freshworks.com/support/solutions/articles/50000004766-how-to-find-the-freshchat-domain-id). -FreshDesk configuration +* **Username**. Enter the username of a Freshdesk admin user authorized to authenticate the integration. -For information about FreshDesk, see [FreshDesk documentation](https://developers.freshdesk.com/). +* **Password**. Enter the password for the admin user. + +* **API Key**. Enter a Freshdesk [API key](https://support.freshdesk.com/support/solutions/articles/215517-how-to-find-your-api-key). +* +* + +Freshdesk configuration + +For information about Freshdesk, see [Freshdesk documentation](https://developers.freshdesk.com/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/freshservice.md b/docs/platform-services/automation-service/app-central/integrations/freshservice.md index 9b551a5b09..efc1a444ea 100644 --- a/docs/platform-services/automation-service/app-central/integrations/freshservice.md +++ b/docs/platform-services/automation-service/app-central/integrations/freshservice.md @@ -38,8 +38,21 @@ Freshservice is a cloud-based IT Help Desk and service management solution that ## Configure Freshservice in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Freshservice API URL, for example, `https://your-domain.freshservice.com` + +* **API Key**. Enter the Freshservice [API key](https://support.freshservice.com/support/solutions/articles/50000000306-where-do-i-find-my-api-key-) you [copied earlier](#freshservice-configuration). +* +* +* +* Freshservice configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/github.md b/docs/platform-services/automation-service/app-central/integrations/github.md index e305e6ad93..fa4c5c8e9e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/github.md +++ b/docs/platform-services/automation-service/app-central/integrations/github.md @@ -23,11 +23,23 @@ Updated: Jul 06, 2023 ## Configure GitHub in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your GitHub [API URL](https://docs.github.com/en/codespaces/developing-in-a-codespace/default-environment-variables-for-your-codespace). The default value is `https://api.github.com` - * **API URL**. Default is 'https://api.github.com'. - * **Token**. Insert the Token.
GitHub configuration +* **Token**. Enter your GitHub [token](https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/generating-a-user-access-token-for-a-github-app). +* +* +* +* + +GitHub configuration For information about GitHub, see [GitHub documentation](https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/generating-a-user-access-token-for-a-github-app). diff --git a/docs/platform-services/automation-service/app-central/integrations/gitlab.md b/docs/platform-services/automation-service/app-central/integrations/gitlab.md index b6ff43ed16..aa56deb1af 100644 --- a/docs/platform-services/automation-service/app-central/integrations/gitlab.md +++ b/docs/platform-services/automation-service/app-central/integrations/gitlab.md @@ -20,8 +20,21 @@ Query data from GitLab. ## Configure GitLab in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your GitLab [URL](https://docs.gitlab.com/user/project/pages/getting_started_part_one/). + +* **Token**. Enter a GitLab [personal access token](https://docs.gitlab.com/user/profile/personal_access_tokens/). +* +* +* +* GitLab configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox.md b/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox.md index da5db386d3..4ec1dec60c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox.md @@ -32,33 +32,42 @@ Interact with multiple Gmail mailboxes. ## Gmail Multiple Mailbox configuration -1) Create/view a Project at [Developers console](https://console.developers.google.com/). -2) Access your [Google Service Account](https://console.cloud.google.com/projectselector2/iam-admin/serviceaccounts%C2%A0). -3) In the IAM & admin section select [Service accounts](https://cloud.google.com/iam/docs/service-account-overview). -4) In the Service accounts section, click Create Service Account -5) During the service account creations, you will see the Create key, In the Create key section, click CREATE KEY. -6) Select Key type JSON and click CREATE. +1) Create/view a project in the [developers console](https://console.developers.google.com/). +2) Access your [Google service account](https://console.cloud.google.com/projectselector2/iam-admin/serviceaccounts%C2%A0). +3) In the **IAM & Admin** section select [**Service accounts**](https://cloud.google.com/iam/docs/service-account-overview). +4) In the **Service accounts** section, click **Create Service Account**. +5) During the service account creation, you will see **Create key**. In the **Create key** section, click **CREATE KEY**. +6) Select **Key type JSON** and click **CREATE**. 7) A JSON is generated and automatically downloads. -8) From Service accounts page you have to copy your Client ID, it will need for Domain-wide Delegation -9) From the Service account details page you must Enable the G Suite Domain-wide Delegation. -10) At this link [http://admin.google.com/ac/owl/domainwidedelegation](http://admin.google.com/ac/owl/domainwidedelegation), you have to add the following Scopes: - * [*https://mail.google.com/*](https://mail.google.com/) - * [*https://www.googleapis.com/auth/gmail.settings.basic*](https://www.googleapis.com/auth/gmail.settings.basic) - * [*https://www.googleapis.com/auth/admin.directory.user.readonly*](https://www.googleapis.com/auth/admin.directory.user.readonly) - * [*https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly*](https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly) - * [*https://www.googleapis.com/auth/admin.directory.rolemanagement*](https://www.googleapis.com/auth/admin.directory.rolemanagement) -11) In the last stage, you have to activate the API at this links* - * [*https://console.developers.google.com/apis/library/admin.googleapis.com*](https://console.developers.google.com/apis/library/admin.googleapis.com) -12) You have also to Enable the Gmail API - * [https://console.developers.google.com/apis/api/gmail.googleapis.com/overview](https://console.developers.google.com/apis/api/gmail.googleapis.com/overview) - -If the API has been recently enabled, wait a few minutes for the action to propagate to the systems and retry. +8) From the **Service accounts** page you have to copy your client ID. It will need domain-wide delegation. +9) From the **Service accounts** details page you must **Enable the G Suite Domain-wide Delegation**. +10) At this link [http://admin.google.com/ac/owl/domainwidedelegation](http://admin.google.com/ac/owl/domainwidedelegation), you have to add the following xcopes: + * `https://mail.google.com/` + * `https://www.googleapis.com/auth/gmail.settings.basic` + * `https://www.googleapis.com/auth/admin.directory.user.readonly` + * `https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly` + * `https://www.googleapis.com/auth/admin.directory.rolemanagement` +11) In the last stage, you have to activate the API at this link: [https://console.developers.google.com/apis/library/admin.googleapis.com](https://console.developers.google.com/apis/library/admin.googleapis.com) +12) You have also to enable the Gmail API: [https://console.developers.google.com/apis/api/gmail.googleapis.com/overview](https://console.developers.google.com/apis/api/gmail.googleapis.com/overview) + +If the API has been recently enabled, wait a few minutes for the action to propagate to the system and retry. ## Configure Gmail Multiple Mailbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Service Account Email (Gmail)**. Enter your [service account](https://developers.google.com/workspace/guides/create-credentials#service-account) email. + +* **Service Account Credentials JSON (Gmail)**. Enter your [service account credentials JSON](https://developers.google.com/workspace/guides/create-credentials) that you [obtained earlier](#gmail-multiple-mailbox-configuration). +* +* Gmail Multiple Mailbox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/gmail.md b/docs/platform-services/automation-service/app-central/integrations/gmail.md index 6b5451a451..5753790414 100644 --- a/docs/platform-services/automation-service/app-central/integrations/gmail.md +++ b/docs/platform-services/automation-service/app-central/integrations/gmail.md @@ -34,46 +34,46 @@ Interact with filters, mail messages, and attachments in Google Mail. ## Gmail configuration -1) Create a new Project in the [Developer Console](https://console.developers.google.com/). -2) In the APIs & Services section, navigate to Credentials and select [Create Credentials](https://developers.google.com/workspace/guides/create-credentials): [https://console.cloud.google.com/apis/api](https://console.cloud.google.com/apis/api). -3) Select OAuth Client ID as the credential type and set the following inputs: +1. Create a new project in the [Developer Console](https://console.developers.google.com/). +1. In the **APIs & Services** section, navigate to **Credentials** and select [**Create Credentials**](https://developers.google.com/workspace/guides/create-credentials): [https://console.cloud.google.com/apis/api](https://console.cloud.google.com/apis/api). +1. Select **OAuth Client ID** as the credential type and set the following inputs: * **Application Type**. Web Application. - * **Authorized redirect URIs > Add URI**. 'http://localhost/'. + * **Authorized redirect URIs > Add URI**. `http://localhost/` :::note Will only be used to generate a refresh token. ::: -4) Copy the resulting Client ID and Client Secret Key values, as these will be used later.
gmail -5) Navigate to the OAuth Consent Screen section and set the following inputs: - * App Name - * User Support Email: Set to an email that you have access to. - * Developer Contact Information: Set to an email that you have access to. -6) The following Scopes are needed: - * 'https://mail.google.com' - * 'https://www.googleapis.com/auth/gmail.modify' - * 'https://www.googleapis.com/auth/gmail.readonly' - * 'https://www.googleapis.com/auth/admin.directory.user' - * 'https://www.googleapis.com/auth/gmail.compose' - * 'https://www.googleapis.com/auth/gmail.send' - * 'https://www.googleapis.com/auth/gmail.settings.basic' - * 'https://www.googleapis.com/auth/gmail.settings.sharing' - -7) In Cloud SOAR, navigate to **Settings > Integrations > Gmail**, add a new Resource and provide the following inputs: +1. Copy the resulting Client ID and Client Secret Key values, as these will be used later.
gmail +1. Navigate to the **OAuth Consent Screen** section and set the following inputs: + * **App Name** + * **User Support Email**: Set to an email that you have access to. + * **Developer Contact Information**: Set to an email that you have access to. +1. The following xcopes are needed: + * `https://mail.google.com` + * `https://www.googleapis.com/auth/gmail.modify` + * `https://www.googleapis.com/auth/gmail.readonly` + * `https://www.googleapis.com/auth/admin.directory.user` + * `https://www.googleapis.com/auth/gmail.compose` + * `https://www.googleapis.com/auth/gmail.send` + * `https://www.googleapis.com/auth/gmail.settings.basic` + * `https://www.googleapis.com/auth/gmail.settings.sharing` + +1. In Cloud SOAR, navigate to **Settings > Integrations > Gmail**, add a new Resource and provide the following inputs: * Client ID (generated in step 4) * Client Secret Key (generated in step 4) -8) Save and close the Resource. -9) Click and execute the **Authorize DO NOT USE IN PLAYBOOK** action. If successful, a URL will be returned.
gmail -10) Open a new browser tab, and navigate to the URL generated in the previous step. -11) Provide consent for this developer project to access the Gmail API. -12) The response to this consent flow is the localhost redirect specified earlier. Copy this URL. -13) Within this URL, copy the code nested in this URL: +1. Save and close the Resource. +1. Click and execute the **Authorize DO NOT USE IN PLAYBOOK** action. If successful, a URL will be returned.
gmail +1. Open a new browser tab, and navigate to the URL generated in the previous step. +1. Provide consent for this developer project to access the Gmail API. +1. The response to this consent flow is the localhost redirect specified earlier. Copy this URL. +1. Within this URL, copy the code nested in this URL: ``` http://localhost/?code=4/0AbUR2VXXXXFe8kuMTUE4Dkxts4J8mo3\_BkZKxXAcdzXXXXtd9lrjai00pEuG0YXWtWjimg&scope=https://mail.google.com/%20https://www.googleapis.com/auth/gmail.settings.basic ```
gmail -14) In Cloud SOAR, click and run the **Confirm DO NOT USE IN PLAYBOOK** action, providing the code generated above in the Code input.
gmail -15) This will return a JSON result with a "**credentials**" key. Copy the value of this key, which is a base64-encoded string JSON credential we will use in the next and final step.
gmail -16) Paste the base64 string in the "**Credentials**" field of the Integration Resource created in step 7. Save and close the resource window. -17) You can test that the integration credentials are working by running the "**Get Labels**" action (no inputs are needed). If successful, it will return a JSON result of mail labels.
gmail +1. In Cloud SOAR, click and run the **Confirm DO NOT USE IN PLAYBOOK** action, providing the code generated above in the Code input.
gmail +1. This will return a JSON result with a "**credentials**" key. Copy the value of this key, which is a base64-encoded string JSON credential we will use in the next and final step.
gmail +1. Paste the base64 string in the "**Credentials**" field of the Integration Resource created in step 7. Save and close the resource window. +1. You can test that the integration credentials are working by running the "**Get Labels**" action (no inputs are needed). If successful, it will return a JSON result of mail labels.
gmail ## External Libraries @@ -83,8 +83,31 @@ Interact with filters, mail messages, and attachments in Google Mail. ## Configure Gmail in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **Client ID**. Enter the client ID [copied earlier](#gmail-configuration). + +* **Client Secret Key**. Enter the secret for the client ID. + +* **Credentials**. Enter the credentials retrieved from the "Confirm DO NOT USE IN PLAYBOOK" action above. + +* **Developer API Key**. Enter your developer API key. This is only used in the "Search Engine" action. + +* **Custom Search Engine ID**. Enter your search ending ID. This is only used in the "Search Engine" action. +* +* +* +* +* Gmail configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/google-admin.md b/docs/platform-services/automation-service/app-central/integrations/google-admin.md index 8b2eca7797..b973e71353 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-admin.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-admin.md @@ -41,12 +41,23 @@ To [create a Service Account](https://developers.google.com/workspace/guides/cre ## Configure Google Admin in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **User Service Account JSON**. Provide the content of the JSON file generated in [above](#google-admin-configuration). Open the file and copy-paste the whole content in the field. -* **Label**. The desired name for the resource. -* **User Service Account JSON**. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field. -* **Admin User Email**. The e-mail address of an admin user.
Google Admin configuration +* **Admin User Email**. Enter the email address of an admin user. +* +* +* +* + +Google Admin configuration For information about Google Admin, see [Google Workspace Admin documentation](https://support.google.com/a/?hl=en#topic=4388346). diff --git a/docs/platform-services/automation-service/app-central/integrations/google-alert-center.md b/docs/platform-services/automation-service/app-central/integrations/google-alert-center.md index b45d664b6d..91ec2585b0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-alert-center.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-alert-center.md @@ -46,12 +46,23 @@ To [create a Service Account](https://developers.google.com/workspace/guides/cre ## Configure Google Alert Center in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **User Service Account JSON**. Provide the content of the JSON file generated in [above](#google-alert-center-configuration). Open the file and copy-paste the whole content in the field. -* **Label**. The desired name for the resource. -* **User Service Account JSON**. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field. -* **Admin User Email**. The e-mail address of an admin user.
Google Alert Center configuration +* **Admin User Email**. Enter the email address of an admin user. +* +* +* +* + +Google Alert Center configuration For information about Google Alert Center, see [Google Alert Center documentation](https://support.google.com/a/answer/9105393?hl=en). diff --git a/docs/platform-services/automation-service/app-central/integrations/google-chat.md b/docs/platform-services/automation-service/app-central/integrations/google-chat.md index 52e97e0d13..63720a84b5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-chat.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-chat.md @@ -49,11 +49,19 @@ To [create service account credentials](https://developers.google.com/workspace/ ## Configure Google Chat in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Private Key Json**. Provide the content of the JSON file generated [above](#google-chat-configuration). Open the file and copy-paste the whole content in the field. +* +* -* **Label**. The desired name for the resource. -* **Private Key Json**. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field.
Google Chat configuration +Google Chat configuration For information about Google Chat, see [Google Chat documentation](https://developers.google.com/workspace/chat/overview). diff --git a/docs/platform-services/automation-service/app-central/integrations/google-drive.md b/docs/platform-services/automation-service/app-central/integrations/google-drive.md index 5892e46d7c..8bf9c2143d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-drive.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-drive.md @@ -45,12 +45,21 @@ To [create service account credentials](https://developers.google.com/workspace/ ## Configure Google Drive in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **User Service Account JSON**. Provide the content of the JSON file generated [above](#google-drive-configuration). Open the file and copy-paste the whole content in the field. -* **Label**. The desired name for the resource. -* **User Service Account JSON**. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field. -* **Admin User Email**. The e-mail address of an admin user.
Google Drive configuration +* **User Email**. Enter the email address of an admin user. +* +* + +Google Drive configuration For information about Google Drive, see [Google Drive API documentation](https://developers.google.com/workspace/drive/api/guides/about-sdk). diff --git a/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing.md b/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing.md index 8e034f1a98..3d0e5cc639 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing.md @@ -19,8 +19,21 @@ Google Safe Browsing helps protect over four billion devices every day by showin ## Configure Google Safe Browsing in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Google Safe Browsing API URL, for example, `https://safebrowsing.googleapis.com/` + +* **API Key**. Enter a Google Safe Browsing [API key](https://developers.google.com/safe-browsing/v4/get-started#3.-set-up-an-api-key). +* +* +* +* Google Safe Browsing configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp.md b/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp.md index 34007b1066..d517de25de 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-workspace-idp.md @@ -47,15 +47,21 @@ To [create service account credentials](https://developers.google.com/workspace/ ## Configure Google Workspace IDP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Private Key JSON**. Provide the content of the JSON file generated [above](#google-workspace-idp-configuration). Open the file and copy-paste the whole content in the field. -* **Label**. The desired name for the resource. -* **Private Key JSON**. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field. -* **Admin User Email**. The e-mail address of a Google Workspace admin user. -* **Domain Name**. Enter your Google Workspace [domain](https://support.google.com/a/answer/182080?sjid=839597157220156918-NC). -* **Automation Engine**. Select whether to use [Cloud or Bridge execution](/docs/platform-services/automation-service/automation-service-integrations/#cloud-or-bridge-execution). -* **Proxy Options**. Select whether to use a proxy. +* **Admin Email**. Enter the email address of a Google Workspace admin user. + +* **Domain**. Enter your Google Workspace [domain](https://support.google.com/a/answer/182080?sjid=839597157220156918-NC). +* +* Google Workspace IDP Configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/greynoise.md b/docs/platform-services/automation-service/app-central/integrations/greynoise.md index 5be9f98cab..edc9a13502 100644 --- a/docs/platform-services/automation-service/app-central/integrations/greynoise.md +++ b/docs/platform-services/automation-service/app-central/integrations/greynoise.md @@ -25,8 +25,23 @@ GreyNoise tells security analysts what not to worry about. They do this by curat ## Configure GreyNoise in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your GreyNoise API URL, for example, `https://api.greynoise.io` + +* **API Key**. Enter your GreyNoise [API key](https://docs.greynoise.io/docs/getting-started). +* +* +* **CIDR IP (Daemon)**. Enter the [CIDR IP](https://docs.greynoise.io/docs/using-the-greynoise-visualizer#searching-for-an-ip) used to create the alert. + +* +* GreyNoise configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/hacker-target.md b/docs/platform-services/automation-service/app-central/integrations/hacker-target.md index 42f3112a1d..6a22a38440 100644 --- a/docs/platform-services/automation-service/app-central/integrations/hacker-target.md +++ b/docs/platform-services/automation-service/app-central/integrations/hacker-target.md @@ -27,8 +27,21 @@ Utilize Hacker Target's investigational tools during an incident. ## Configure Hacker Target in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Hacker Target server URL, for example, `https://api.hackertarget.com` + +* **API Key**. Enter a Hacker Target [API key](https://hackertarget.com/ip-tools/). +* +* +* +* Hacker Target configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/hatching-triage.md b/docs/platform-services/automation-service/app-central/integrations/hatching-triage.md index 6dbc005ae8..fd248940c8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/hatching-triage.md +++ b/docs/platform-services/automation-service/app-central/integrations/hatching-triage.md @@ -25,8 +25,19 @@ Detonate files with Hatching Triage Malware Sandbox. ## Configure Hatching Triage in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Hatching Triage URL. + +* **API Key**. Enter a Hatching Triage [API key](https://tria.ge/docs/cloud-api/conventions/#authentication). +* +* Hatching Triage configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/have-i-been-pwned.md b/docs/platform-services/automation-service/app-central/integrations/have-i-been-pwned.md index 95664c6205..b8a3cc35f4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/have-i-been-pwned.md +++ b/docs/platform-services/automation-service/app-central/integrations/have-i-been-pwned.md @@ -27,8 +27,21 @@ Database ## Configure Have I Been Pwned in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Have I Been Pwned API URL, for example, `https://haveibeenpwned.com/API/v3` + +* **API Key**. Enter a Have I Been Pwned [API key](https://haveibeenpwned.com/api/v3#Authorisation). +* +* +* +* Have I Been Pwned configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/hp-universal-cmdb.md b/docs/platform-services/automation-service/app-central/integrations/hp-universal-cmdb.md index 23b00f9041..6d0fd498f1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/hp-universal-cmdb.md +++ b/docs/platform-services/automation-service/app-central/integrations/hp-universal-cmdb.md @@ -18,8 +18,23 @@ Gather host configuration data with HP Universal CMDB. ## Configure HP Universal CMDB in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your HP Universal CMDB server API URL, for example, `https://localhost:8443/rest-api/` + +* **Username**. Enter the username of an HP Universal CMDB admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* HP Universal CMDB configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/http-tools.md b/docs/platform-services/automation-service/app-central/integrations/http-tools.md index e4792cacba..b3e7f3f4d4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/http-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/http-tools.md @@ -23,14 +23,27 @@ Set of scripts to perform simple HTTP requests. ## Configure HTTP Tools in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **HTTP API URL**. Enter the URL to send the requests. - * **Label**. Name of the resource for HTTP Tools. - * **HTTP API URL**. The URL to send the requests. - * **Username**. The username to use to access the URL. - * **Password**. The password to use to access the URL. - * **Extra Headers**. Additional HTTP headers to send with the requests e.g. (key1:value1, key2:value2) Or JSON.
HTTP Tools configuration +* **Username**. Enter the username to use to access the URL. + +* **Password**. Enter the password for the user. + +* **Extra Headers**. Enter additional HTTP headers to send with the requests for example, `key1:value1, key2:value2` or JSON. +* +* +* +* + +HTTP Tools configuration ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/hudsonrock-cavalier.md b/docs/platform-services/automation-service/app-central/integrations/hudsonrock-cavalier.md index c8d217ead9..bcd40dc9db 100644 --- a/docs/platform-services/automation-service/app-central/integrations/hudsonrock-cavalier.md +++ b/docs/platform-services/automation-service/app-central/integrations/hudsonrock-cavalier.md @@ -22,12 +22,23 @@ HudsonRock Cavalier is a cybercrime intelligence data source composed of million ## Configure HudsonRock Cavalier in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your HudsonRock API URL, for example, `https://api.hudsonrock.com/json/v3` - * **Label**. The desired name for the resource. - * **URL**. Your HudsonRock URL. - * **API Key**. Your HudsonRock API Key you copied earlier from HudsonRock.
Airtable configuration +* **API Key**. Enter a HudsonRock [API key](https://docs.hudsonrock.com/reference/authentication) you copied earlier from HudsonRock. +* +* +* +* + +Airtable configuration For information about HudsonRock, see [HudsonRock documentation](https://docs.hudsonrock.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/hybrid-analysis.md b/docs/platform-services/automation-service/app-central/integrations/hybrid-analysis.md index d0d9f77f6e..ee35291d0b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/hybrid-analysis.md +++ b/docs/platform-services/automation-service/app-central/integrations/hybrid-analysis.md @@ -29,12 +29,25 @@ To obtain an API Key visit your [profile page](https://www.hybrid-analysis.com/m ## Configure Hybrid Analysis in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Hybrid Analysis API URL, for example, `https://www.hybrid-analysis.com` - * **Label**. The name of the resource. - * **Server URL**. 'https://www.hybrid-analysis.com'. - * **API Key**. Insert the previously copied key.
Hybrid Analysis configuration +* **API Key**. Insert the [API key](https://www.hybrid-analysis.com/docs/api/v2) that you [previously copied](#hybrid-analysis-configuration). + +* **User Agent**. Enter the user agent, for example, `Falcon`. +* +* +* +* + +Hybrid Analysis configuration For information about Hybrid Analysis, see [Hybrid Analysis documentation](https://www.hybrid-analysis.com/docs/api/v2). diff --git a/docs/platform-services/automation-service/app-central/integrations/ibm-maximo.md b/docs/platform-services/automation-service/app-central/integrations/ibm-maximo.md index cda9416c12..41b6741831 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ibm-maximo.md +++ b/docs/platform-services/automation-service/app-central/integrations/ibm-maximo.md @@ -22,13 +22,32 @@ The IBM Maximo is a single, integrated cloud-based platform that uses AI, IoT an ## Configure IBM Maximo in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the [hostname](https://www.ibm.com/docs/en/masv-and-l/cd?topic=installing-setting-up-maximo-application-suite) for the API. - * **Host**. Host for API. - * **Username**. Username you use to log in into the system. - * **Password**. The password of your email. - * Additionally, if need you to, you can populate the query daemons.
IBM Maximo configuration +* **Port**. Enter the port for your IBM Maximo instance. + +* **Username**. Enter the username of an IBM Maximo admin user who logs into the system. + +* **Password**. Enter the password of the admin user. + +* +* +* +* + +:::note +Additionally, if need you to, you can populate the [query](https://www.ibm.com/docs/en/maximo-anywhere/7.6.2?topic=queries-creating-in-maximo-asset-management) daemons. +::: + +IBM Maximo configuration For information about IBM Maximo, see [IBM Maximo documentation](https://www.ibm.com/docs/en/mam/7.6.1). diff --git a/docs/platform-services/automation-service/app-central/integrations/ibm-mss-tickets.md b/docs/platform-services/automation-service/app-central/integrations/ibm-mss-tickets.md index 93c43aa21b..d69105d106 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ibm-mss-tickets.md +++ b/docs/platform-services/automation-service/app-central/integrations/ibm-mss-tickets.md @@ -21,8 +21,20 @@ Create, update and gather IBM MSS tickets information. ## Configure IBM MSS Tickets in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Authentication Token**. Enter an IBM MSS [token](https://cloud.ibm.com/docs/key-protect?topic=key-protect-retrieve-access-token). + +* +* +* +* GreyNoise configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ibm-qradar.md b/docs/platform-services/automation-service/app-central/integrations/ibm-qradar.md index 38471c162d..5ef3f89412 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ibm-qradar.md +++ b/docs/platform-services/automation-service/app-central/integrations/ibm-qradar.md @@ -33,8 +33,26 @@ IBM QRadar SIEM helps security teams detect, prioritize and respond to threats a ## Configure IBM QRadar in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your IBM QRadar server URL. + +* **Authentication method**. Select either **Username and password** or **Authentication token**. + +* **Username**. If you selected **Username and password** above, enter the username of an admin user authorized to authenticate the integration. + +* **Password**. If you selected **Username and password** above, enter the password for the admin user. + +* **Token**. If you selected **Authentication token** above, enter the [token](https://www.ibm.com/docs/en/qsip/7.5?topic=visibility-creating-authorized-service-token). +* +* +* IBM QRadar configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ibm-x-force-exchange.md b/docs/platform-services/automation-service/app-central/integrations/ibm-x-force-exchange.md index 0ce26046e1..0efd6e82fa 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ibm-x-force-exchange.md +++ b/docs/platform-services/automation-service/app-central/integrations/ibm-x-force-exchange.md @@ -24,8 +24,29 @@ IBM X-Force Exchange is a cloud-based threat intelligence platform that allows y ## Configure IBM X-Force Exchange in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your IBM X-Force [API URL](https://api.xforce.ibmcloud.com/doc/), for example, `https://api.xforce.ibmcloud.com` + +* **API Key**. Enter an IBM X-Force [API key](https://www.ibm.com/docs/en/qradar-common?topic=dashboard-configuring-advanced-threat-protection-feed-licensing#taskt_Qapps_XForceapp_configure_atpf__steps__1). + +* **Secret Key**. Enter the secret for the IBM X-Force API key. +* +* +* +* +* +* +* IBM X-Force Exchange configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/imap.md b/docs/platform-services/automation-service/app-central/integrations/imap.md index 3599bd2819..3a26fa6003 100644 --- a/docs/platform-services/automation-service/app-central/integrations/imap.md +++ b/docs/platform-services/automation-service/app-central/integrations/imap.md @@ -20,9 +20,9 @@ Allows you to connect your mailbox with Cloud SOAR and receive mail via IMAP pro * **Incoming Mail Daemon** (*Daemon*) - Automatically get emails using IMAP and save emails. -### Get Access Key and Access ID +## Get Access Key and Access ID -[Create an access key](/docs/manage/security/access-keys/#create-an-access-key) and copy the resulting **Access ID** and **Access Key**. Store the ID and access key (temporally) into a text editor. +[Create a Sumo Logic access key](/docs/manage/security/access-keys/#create-an-access-key) and copy the resulting **Access ID** and **Access Key**. Store the ID and access key (temporally) into a text editor. :::note The ID and key won't be available again once you close the confirmation screen. @@ -31,16 +31,44 @@ The ID and key won't be available again once you close the confirmation screen. ## Configure IMAP in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **IMAP Server**. Enter the IMAP server URL, for example, `Imap.gmail.com`, `Outlook.office365.com`, `Imap.mail.yahoo.com` - * **IMAP Server**. For example: `Imap.gmail.com`, `Outlook.office365.com`, `Imap.mail.yahoo.com` - * **Mailbox Account**. Only required if the Username isn't already an email address (for example: Username: `admin`, Mailbox Account: `admin@test.com`). - * **Access ID**. The access ID that you copied earlier. - * **Access Key**. The access key that you copied earlier. - * **Email Fetch Type (Daemon)**. - * **Unseen/Unread**. Only fetch the mails which are currently UNSEEN or UNREAD. - * **Fetch From Latest CSOAR Mail**. Fetch all mails from the mail server which are not yet stored on Cloud SOAR. For the first time it will fetch UNSEEN mails for the second run/execution. Pre-Filtering options can be used to pre-filter emails in the mail server. Only pre-filtered emails are imported and analyzed by Cloud SOAR. +* **Port**. Select the IMAP port, either `993 SSL/TLS` or `143` + +* **Username**. Enter the username of an admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. + +* **Connection Security**. Select `SSL/TLS` or `STARTTLS` +* +* **Do not allow trusted certificates**. Select to allow untrusted certificates. + +* **Mailbox Account**. Enter the mailbox account. Only required if the username isn't already an email address (for example, when for username `admin` the mailbox account is `admin@test.com`). +* +* +* + +* **Email Fetch Type (Daemon)**. Select either: + * **Unseen/Unread**. Only fetch the mails which are currently UNSEEN or UNREAD. + * **Fetch From Latest CSOAR Mail**. Fetch all mails from the mail server which are not yet stored on Cloud SOAR. For the first time it will fetch UNSEEN mails for the second run/execution. Pre-Filtering options can be used to pre-filter emails in the mail server. Only pre-filtered emails are imported and analyzed by Cloud SOAR. See [Email fetch (daemon)](#email-fetch-daemon) below. + +* +* + +IMAP configuration + +### Email fetch (daemon) **Email Fetch Type** and other filters below will be combined with the **AND** operator. Pre-filtered options: * **From**. You can filter email using From or you can use the full domain name. For example, `sumologic.com, sales@sumologic.com`. Based on this example, only the mails coming from Sumo Logic domain or `sales@sumologic.com` will be fetched. This field accepts multiple values separated by a comma. Multiple values will be combined with the OR operator. @@ -62,7 +90,6 @@ import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; As specified, all filters will be combined with **AND** operator. -IMAP configuration ## Additional configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/imperva-incapsula.md b/docs/platform-services/automation-service/app-central/integrations/imperva-incapsula.md index 14f547256c..2db37818d9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/imperva-incapsula.md +++ b/docs/platform-services/automation-service/app-central/integrations/imperva-incapsula.md @@ -18,8 +18,27 @@ Gather statistical information from Incapsula for incident investigation. ## Configure Imperva Incapsula in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the Imperva Incapsula hostname, for example `my.incapsula.com` + +* **Port**. Enter your Imperva Incapsula port. + +* **API ID** Enter an Imperva Incapsula [API ID](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm). + +* **API Key**. Enter the key for the API ID. + +* **Account ID**. Enter the numeric identifier of the [account](https://docs.imperva.com/bundle/z-kb-articles-knowledgebase-support/page/290234822.html) to fetch data for. +* +* +* +* Imperva Incapsula configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/imperva-securesphere.md b/docs/platform-services/automation-service/app-central/integrations/imperva-securesphere.md index 03d7977868..e22f83d8a1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/imperva-securesphere.md +++ b/docs/platform-services/automation-service/app-central/integrations/imperva-securesphere.md @@ -19,12 +19,29 @@ Retrieve and modify IP groups for incident investigation and remediation. ## Configure Imperva SecureSphere in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter the Imperva SecureSphere hostname, for example `192.168.74.51` + +* **Port**. Enter your Imperva SecureSphere port. + +* **Username**. Enter the username of an Imperva SecureSphere admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password of the admin user. +* +* +* +* Imperva SecureSphere configuration -For information about Imperva SecureSphere, see [Imperva documentation](https://docs.imperva.com/). +For information about Imperva SecureSphere, see the [Imperva SecureSphere documentation](https://docs.imperva.com/bundle/v15.3-waf-administration-guide/page/9282.htm). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/imperva-waf.md b/docs/platform-services/automation-service/app-central/integrations/imperva-waf.md index 8d9c3f0248..114d2b21aa 100644 --- a/docs/platform-services/automation-service/app-central/integrations/imperva-waf.md +++ b/docs/platform-services/automation-service/app-central/integrations/imperva-waf.md @@ -18,13 +18,25 @@ Imperva WAF offers web application security firewall, providing protection again ## Configure Imperva WAF in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Imperva WAF URL, for example, `https://my.imperva.com/` - * **Label**. The name for the resource. - * **URL API**. 'https://my.imperva.com/'. - * **API ID** - * **API Key**
Imperva WAF configuration +* **API ID**. Enter an Imperva WAF [API ID](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm). + +* **API Key**. Enter the key associated with the API ID. +* +* +* +* + +Imperva WAF configuration For information about Imperva WAF, see [Imperva documentation](https://docs.imperva.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/incident-tools.md b/docs/platform-services/automation-service/app-central/integrations/incident-tools.md index a6ea8efd76..5852ed28be 100644 --- a/docs/platform-services/automation-service/app-central/integrations/incident-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/incident-tools.md @@ -55,11 +55,26 @@ Supervised Active Intelligence Automation ## Configure Incident Tools in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* +* +* +* - * Set the **Cloud SOAR API URL** (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * Provide the **Access ID** and **Access Key** from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys.
Incident Tools configuration +Incident Tools configuration ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/intel-471.md b/docs/platform-services/automation-service/app-central/integrations/intel-471.md index b6d01071c9..c2079b36a9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/intel-471.md +++ b/docs/platform-services/automation-service/app-central/integrations/intel-471.md @@ -27,14 +27,27 @@ Intel 471provides comprehensive coverage of the criminal underground, SaaS platf ## Configure Intel 471 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Intel 471 URL, for example, `https://api.intel471.com/` - * **URL**. 'https://api.intel471.com/'. - * **Email Address**. your email address. - * **API Key**. Insert the previously copied key.
Intel 471 configuration +* **Email Address**. Enter your email address. -For information about Intel 471, see the [Intel 471 website](https://intel471.com/resources). +* **API Key**. Insert the [previously copied key](#intel-471-configuration). +* +* +* +* + +Intel 471 configuration + +For information about Intel 471, see the [Intel 471 website](https://intel471.com/resources). The Intel471 documentation is not public and can only be accessed by partners or customers. ## Category diff --git a/docs/platform-services/automation-service/app-central/integrations/intelligence-x.md b/docs/platform-services/automation-service/app-central/integrations/intelligence-x.md index bdc4d73f55..c89ee7386c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/intelligence-x.md +++ b/docs/platform-services/automation-service/app-central/integrations/intelligence-x.md @@ -31,11 +31,24 @@ Follow these steps to get your API Key and URL from Intelligence X: ## Configure Intelligence X in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Intelligence X URL. - * **Label**. The desired name for the resource. - * **API key**. Your Intelligence X API Key you copied earlier from Intelligence X.
Intelligence X configuration +* **API key**. Enter the Intelligence X [API key](https://www.ginseg.com/wp-content/uploads/sites/2/2019/07/Manual-Intelligence-X-API.pdf) you [copied earlier](#intelligence-x-configuration) from Intelligence X. + +* +* +* +* + +Intelligence X configuration For information about Intelligence X, see the [Intelligence X website](https://intelx.io/). diff --git a/docs/platform-services/automation-service/app-central/integrations/intezer.md b/docs/platform-services/automation-service/app-central/integrations/intezer.md index 65909ad015..ce9406beb1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/intezer.md +++ b/docs/platform-services/automation-service/app-central/integrations/intezer.md @@ -20,11 +20,23 @@ Intezer is a platform that provides automated, algorithm-driven Tier 1 services ## Configure Intezer in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter you Intezer URL. - * **Label**. Your Resource Label. - * **API Key**. Your API Key.
Intezer configuration +* **API Key**. Enter your Intezer [API key](https://intezer.com/blog/api-intezer-analyze-community/). +* +* +* +* + +Intezer configuration For information about Intezer, see the [Intezer website](https://intezer.com/resource-center/). diff --git a/docs/platform-services/automation-service/app-central/integrations/intsights-tip.md b/docs/platform-services/automation-service/app-central/integrations/intsights-tip.md index 3a7fae20ac..8c913e2404 100644 --- a/docs/platform-services/automation-service/app-central/integrations/intsights-tip.md +++ b/docs/platform-services/automation-service/app-central/integrations/intsights-tip.md @@ -26,8 +26,23 @@ Intsight Threat Intelligence Platform. ## Configure Intsights TIP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Intsights URL. + +* **Account ID**. Enter your Intsights [account ID](https://docs.rapid7.com/threat-command/subscription-settings/). + +* **API Key**. Enter your Intsights [API key](https://docs.rapid7.com/insight/managing-platform-api-keys/). +* +* +* +* Intsights TIP configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ip-api.md b/docs/platform-services/automation-service/app-central/integrations/ip-api.md index 8302edd623..0d59944262 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ip-api.md +++ b/docs/platform-services/automation-service/app-central/integrations/ip-api.md @@ -24,12 +24,21 @@ The integration with IP-API allows users to lookup any IP address. IP-API is IP ## Configure IP-API in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your IP-API hostname, for example, `https://pro.ip-api.com'/` - * **Label**. The name of the resource. - * **Host**. 'https://pro.ip-api.com'/. - * **API Key**. The API Key copied earlier.
IP-API configuration +* **API Key**. Enter the API Key you [copied earlier](#ip-api-configuration). +* +* + +IP-API configuration For information about IP-API, see [IP-API documentation](https://ip-api.com/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/ip-quality-score.md b/docs/platform-services/automation-service/app-central/integrations/ip-quality-score.md index 6f42d2b0ff..325d23b2a0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ip-quality-score.md +++ b/docs/platform-services/automation-service/app-central/integrations/ip-quality-score.md @@ -21,8 +21,21 @@ Perform threat intelligence evidence gathering with IPQualityScore. ## Configure IPQualityScore in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your IPQualityScore API URL, for example, `https://www.ipqualityscore.com/` + +* **API Key**. Enter an IPQualityScore API key. +* +* +* +* IPQualityScore configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ipdata.md b/docs/platform-services/automation-service/app-central/integrations/ipdata.md index 63dd14ee5f..581378370e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ipdata.md +++ b/docs/platform-services/automation-service/app-central/integrations/ipdata.md @@ -22,8 +22,21 @@ Threat Intelligence-Reputation ## Configure ipdata in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Select your ipdata API URL, either `https://api.ipdata.co` or` https://eu-api.ipdata.co` + +* **API Key**. Enter an ipdata [API key](https://docs.ipdata.co/reference/authentication). +* +* +* +* ipdata configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ipinfo.md b/docs/platform-services/automation-service/app-central/integrations/ipinfo.md index a5d465a83c..35e2616cff 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ipinfo.md +++ b/docs/platform-services/automation-service/app-central/integrations/ipinfo.md @@ -28,13 +28,26 @@ Visit [IPinfo](https://ipinfo.io/developers/hosted-domains) for more info. ## IPinfo configuration -This integration requires an IPinfo Access Token. You can [retrieve](https://ipinfo.io/account/token) the Access Token from your IPinfo account.
ipinfo +This integration requires an IPinfo [Access Token](https://ipinfo.io/developers). You can [retrieve](https://ipinfo.io/account/token) the Access Token from your IPinfo account.
ipinfo ## Configure IPinfo in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your IPinfo URL. + +* **Token**. Enter the IPinfo [token](https://ipinfo.io/developers) you [retrieved earlier](#ipinfo-configuration). +* +* +* +* IPinfo configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/ipstack.md b/docs/platform-services/automation-service/app-central/integrations/ipstack.md index 28bd7a5113..af7311d3e1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/ipstack.md +++ b/docs/platform-services/automation-service/app-central/integrations/ipstack.md @@ -17,19 +17,30 @@ IPstack API services enable you to locate and identify website visitors at a sta ## IPstack configuration -Visit [IPstack](https://ipstack.com/product) and Sign Up to get an API key. +Visit [IPstack](https://ipstack.com/product) and sign up to get an API key. -Once you're logged in you can also copy the API Key from here: [https://ipstack.com/dashboard](https://ipstack.com/dashboard) +Once you're logged in you can also copy the API key from here: [https://ipstack.com/dashboard](https://ipstack.com/dashboard) ## Configure IPstack in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your IPstack API URL. By default, the URL is `http://api.ipstack.com` - * **Label**. The desired name for the resource. - * **API URL**. By default, the url is: 'http://api.ipstack.com'. - * **API Key**. The API Access Key you copied earlier.
IPstack configuration +* **API Key**. Enter the [API Access Key](https://ipstack.com/documentation#apiaccesskey) you [copied earlier](#ipstack-configuration). +* +* +* +* + +IPstack configuration For information about IPstack, see [IPstack documentation](https://ipstack.com/documentation). diff --git a/docs/platform-services/automation-service/app-central/integrations/jamf-protect.md b/docs/platform-services/automation-service/app-central/integrations/jamf-protect.md index 5662ec6621..6d0aab62f4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/jamf-protect.md +++ b/docs/platform-services/automation-service/app-central/integrations/jamf-protect.md @@ -24,19 +24,34 @@ Updated: Jun 15, 2023*** 1. Log in to Jamf Protect. 2. Click on Administrative on the left menu. -3. Create API Client and click **Save**.
jamf-protect -4. Copy API Client Password. -5. Copy Client ID in API Client Configuration +3. Select [Create API Client](https://learn.jamf.com/en-US/bundle/jamf-protect-documentation/page/Jamf_Protect_API.html) and click **Save**.
jamf-protect +4. Copy the API Client Password. +5. Copy the Client ID in API Client Configuration ## Configure Jamf Protect in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Jamf Protect [API URL](https://learn.jamf.com/en-US/bundle/jamf-protect-documentation/page/Jamf_Protect_API.html), for example, `https://your-tenant.protect.jamfcloud.com` - * **API URL**. 'https://your-tenant.protect.jamfcloud.com'. - * **Client ID**. Insert copied Client ID. - * **Password**. Insert copied Password.
Jamf Protect configuration +* **Client ID**. Insert the Jamf Protect [Client ID](https://learn.jamf.com/en-US/bundle/jamf-protect-documentation/page/Jamf_Protect_API.html) that you [copied earlier](#jamf-protect-configuration). + +* **Password**. Insert the password you [copied earlier](#jamf-protect-configuration). +* +* +* +* + + + +Jamf Protect configuration For information about Jamf Protect, see [Jamf Protect documentation](https://www.jamf.com/resources/product-documentation/jamf-protect-administrators-guide/). diff --git a/docs/platform-services/automation-service/app-central/integrations/jamf.md b/docs/platform-services/automation-service/app-central/integrations/jamf.md index dad5411e3d..8ecc524e01 100644 --- a/docs/platform-services/automation-service/app-central/integrations/jamf.md +++ b/docs/platform-services/automation-service/app-central/integrations/jamf.md @@ -24,12 +24,25 @@ The Jamf platform creates IT software that manages Apple devices. ## Configure Jamf in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Jamf URL](https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Jamf_Pro_URL.html). - * **URL**: jamf url. - * **Username** - * **Password**
Jamf configuration +* **Username**. Enter the username of a Jamf admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +Jamf configuration For information about Jamf, see [Jamf documentation](https://www.jamf.com/resources/product-documentation/jamf-pro-administrators-guide/). diff --git a/docs/platform-services/automation-service/app-central/integrations/javelin-ad-protect.md b/docs/platform-services/automation-service/app-central/integrations/javelin-ad-protect.md index b7e06f90f2..92e90a0ad8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/javelin-ad-protect.md +++ b/docs/platform-services/automation-service/app-central/integrations/javelin-ad-protect.md @@ -18,8 +18,27 @@ Symantec Javelin AD Protect provide protection for Microsoft Active Directory fr ## Configure Javelin AD Protect in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server IP**. Enter the static IP address of your Javelin AD Protect server. + +* **Username**. Enter the username of a Javelin AD Protect admin user authorized to provide authentication for the integration. The username and password required to authenticate the underlying SMB connection with the remote server. + +* **Password**. Enter the password for the admin user. + +* **Server Name**. Enter the NetBIOS machine name of the remote server. On Windows, you can find out the machine name by right-clicking on the "My Computer" and selecting "Properties". This parameter must be the same as what has been configured on the remote server, or else the connection will be rejected. + +* **Share Directory**. Enter the shared folder path. + +* **Client Machine**. Enter the local NetBIOS machine name that will identify where this connection is originating from. You can freely choose a name as long as it contains a maximum of 15 alphanumeric characters. +* +* Javelin AD configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/joe-sandbox.md b/docs/platform-services/automation-service/app-central/integrations/joe-sandbox.md index ee8b80e358..a8751c7621 100644 --- a/docs/platform-services/automation-service/app-central/integrations/joe-sandbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/joe-sandbox.md @@ -30,8 +30,27 @@ Execute suspicious files and URLs for analysis during incident investigation usi ## Configure Joe Sandbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your Joe Sandbox [API URL](https://www.joesecurity.org/guides/joeboxdetect/html/guide.html#installation), for example `https://jbxcloud.joesecurity.org/api` + +* **API Key**. Enter your Joe Sandbox [API key](https://www.joesecurity.org/guides/joeboxdetect/html/guide.html#installation). +* +* +* +* +* +* +* Joe Sandbox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/kaspersky-cybertrace.md b/docs/platform-services/automation-service/app-central/integrations/kaspersky-cybertrace.md index 94ebf5d046..e0787f811a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/kaspersky-cybertrace.md +++ b/docs/platform-services/automation-service/app-central/integrations/kaspersky-cybertrace.md @@ -18,8 +18,23 @@ Perform queries in Kaspersky CyberTrace. ## Configure Kaspersky CyberTrace in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Kaspersky CyberTrance [server URL](https://support.kaspersky.com/cybertrace/4.4/en-US/198537.htm). + +* **Username**. Enter the username of a Kaspersky CyberTrance admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Kaspersky Cybertrace configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/kaspersky-tip.md b/docs/platform-services/automation-service/app-central/integrations/kaspersky-tip.md index 6dc65d68c4..d1d7cdb096 100644 --- a/docs/platform-services/automation-service/app-central/integrations/kaspersky-tip.md +++ b/docs/platform-services/automation-service/app-central/integrations/kaspersky-tip.md @@ -18,12 +18,28 @@ Quickly determine whether an investigated object is dangerous or clean by reques ## Configure Kaspersky TIP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Kaspersky TIP server URL. + +* **Username**. Enter the username of a Kaspersky TIP admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. + +* **Kaspersky Certificate**. Enter the Kaspersky [certificate](https://support.kaspersky.com/KTIPS/en-EN/153080.htm). The certificate must be in PEM (base64encode) format. +* +* +* Kaspersky TIP configuration -For information about Kaspersky TIP, see [Kaspersky TIP documentation](https://kaspersky-tip.readthedocs.io/en/stable/). +For information about Kaspersky TIP, see [Kaspersky TIP documentation](https://opentip.kaspersky.com/Help/Doc_data/About.htm). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/kela-darkbeast.md b/docs/platform-services/automation-service/app-central/integrations/kela-darkbeast.md index 8e27ca2353..9a1c552df1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/kela-darkbeast.md +++ b/docs/platform-services/automation-service/app-central/integrations/kela-darkbeast.md @@ -28,13 +28,25 @@ KELA Darkbeast provides incident responders, threat hunters, investigators, and ## Configure KELA Darkbeast in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **URL**. 'https://darkbeast.ke-la.com/api/v1/'. - * **API Token**. Insert the previously copied token.
Kela Darkbeast configuration - -For information about KELA Cyber Threat Intelligence (formerly KELA Darkbeast), see [KELA documentation](https://docs.ke-la.com/kela-docs). +* +* **URL**. Enter your KELA Darkbeast API URL, for example, `https://darkbeast.ke-la.com/api/v1/` + +* **API Token**. Insert the [previously copied token](#kela-darkbeast-configuration). +* +* +* +* + +Kela Darkbeast configuration + +For information about KELA Darkbeast, see [KELA documentation](https://docs.ke-la.com/kela-docs). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/kela-radark.md b/docs/platform-services/automation-service/app-central/integrations/kela-radark.md index afda22c022..7ae23e9644 100644 --- a/docs/platform-services/automation-service/app-central/integrations/kela-radark.md +++ b/docs/platform-services/automation-service/app-central/integrations/kela-radark.md @@ -27,12 +27,27 @@ KELA's RADARK delivers automated threat intelligence, cultivating the targeted a ## Configure KELA RaDark in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your KELA RaDark API URL. + +* **API Token**. Insert the [previously copied token](#kela-radark-configuration). + +* **Monitor ID**. Enter the KELA RaDark monitor ID. +* +* +* +* KELA RaDark configuration -For information about KELA, see [KELA documentation](https://docs.ke-la.com/kela-docs). +For information about KELA RaDark, see [KELA documentation](https://docs.ke-la.com/kela-docs). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-reporting.md b/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-reporting.md index 9e309bac42..9928dcc2a5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-reporting.md +++ b/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-reporting.md @@ -22,12 +22,23 @@ KnowBe4 KMSAT is a security platform for security awareness training and simulat ## Configure KnowBe4 KMSAT - Reporting in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the [reporting base URL](https://developer.knowbe4.com/rest/reporting#tag/Base-URL) for the KnowBe4 server that is closest to your geographic location. - * **Label**. The desired name for the resource. - * **URL**. Server that is closer to your geo location. - * **API Key**. Your KnowBe4 KMSAT API Key you copied earlier from KnowBe4 KMSAT.
KnowBe4 KMSAT Reporting configuration +* **API Key**. Enter your KnowBe4 KMSAT [API key](https://developer.knowbe4.com/rest/reporting#tag/Authentication). +* +* +* +* + +KnowBe4 KMSAT Reporting configuration For information about KnowBe4 reporting, see [KnowBe4 reporting documentation](https://support.knowbe4.com/hc/en-us/articles/360007952894-Reporting-Guide). diff --git a/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-user-events.md b/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-user-events.md index d165f6f81a..867521a837 100644 --- a/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-user-events.md +++ b/docs/platform-services/automation-service/app-central/integrations/knowbe4-kmsat-user-events.md @@ -25,17 +25,23 @@ KnowBe4 KMSAT is a security platform for security awareness training and simulat ## Configure KnowBe4 KMSAT - User Events in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the [events base URL](https://developer.knowbe4.com/rest/userEvents#tag/Base-URL) for the KnowBe4 server that is closest to your geographic location. - * **Label**. The desired name for the resource. - * **URL**. Server that is closer to your geo location. - * US server - https://api.events.knowbe4.com - * EU server - https://api.events.knowbe4.com - * CA server - https://api-ca.events.knowbe4.com - * UK server - https://api-uk.events.knowbe4.com - * DE server - https://api-de.events.knowbe4.com - * **API Key**. Your KnowBe4 KMSAT API Key you copied earlier from KnowBe4 KMSAT.
KnowBe4 KMSAT User Events configuration +* **API Key**. Enter your KnowBe4 KMSAT [API key](https://developer.knowbe4.com/events/). +* +* +* +* + +KnowBe4 KMSAT User Events configuration For information about KnowBe4 user events, see [KnowBe4 user event documentation](https://support.knowbe4.com/hc/en-us/articles/360024863474-User-Event-API-Overview). diff --git a/docs/platform-services/automation-service/app-central/integrations/knowbe4-phisher.md b/docs/platform-services/automation-service/app-central/integrations/knowbe4-phisher.md index 84f8391780..a0a6cfb317 100644 --- a/docs/platform-services/automation-service/app-central/integrations/knowbe4-phisher.md +++ b/docs/platform-services/automation-service/app-central/integrations/knowbe4-phisher.md @@ -25,12 +25,23 @@ Follow the steps from the KnowBe4 PhishER [guide](https://developer.knowbe4.com/ ## Configure KnowBe4 PhishER in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the [PhishER base URL](https://developer.knowbe4.com/graphql/phisher/page/Base-URL) for the KnowBe4 server that is closest to your geographic location. - * **Label**. The name for the resource. - * **URL**. KnowBe4 PhishER host URL. - * **API Token**. Your KnowBe4 PhishER API key.
KnowBe4 PhishER configuration +* **API Token**. Enter your KnowBe4 PhishER [API key](https://developer.knowbe4.com/graphql/phisher/page/Authentication). +* +* +* +* + +KnowBe4 PhishER configuration For information about KnowBe4 PhishER, see [KnowBe4 PhishER documentation](https://support.knowbe4.com/hc/en-us/articles/360010802673-PhishER-Product-Manual). diff --git a/docs/platform-services/automation-service/app-central/integrations/lacework.md b/docs/platform-services/automation-service/app-central/integrations/lacework.md index 385d580828..875ad882ec 100644 --- a/docs/platform-services/automation-service/app-central/integrations/lacework.md +++ b/docs/platform-services/automation-service/app-central/integrations/lacework.md @@ -26,8 +26,25 @@ Lacework provides end-to-end cloud security automation for AWS, Azure, and GCP w ## Configure Lacework in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Lacework URL, for example, `https://YourLacework.lacework.net` + +* **Access Key ID**. Enter your Lacework [API key ID](https://docs.fortinet.com/document/lacework-forticnapp/latest/administration-guide/155000/api-keys). + +* **Secret Key**. Enter the secret for the API key. + +* **Token Expiration Time (s)**. Enter the token expiration time in seconds. The maximum is 86400 seconds (24 hours). +* +* +* +* Lacework configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/lansweeper.md b/docs/platform-services/automation-service/app-central/integrations/lansweeper.md index ac91e567ae..7a3732f1d9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/lansweeper.md +++ b/docs/platform-services/automation-service/app-central/integrations/lansweeper.md @@ -27,11 +27,23 @@ Log in to **Lansweeper** with your email ID and password to start the [configura ## Configure Lansweeper in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Lansweeper API URL](https://developer.lansweeper.com/docs/data-api/get-started/endpoint). The default value is `https://api.lansweeper.com` - * **URL**. Default value for API URL is 'https://api.lansweeper.com'. - * **Token**. The Token you copied earlier.
Lansweeper configuration +* **Token**. Enter the [token](https://developer.lansweeper.com/docs/data-api/get-started/quickstart/#personal-access-token-pat) you [copied earlier](#lansweeper-configuration). +* +* +* +* + +Lansweeper configuration For information about Lansweeper, see [Lansweeper documentation](https://developer.lansweeper.com/docs/data-api/get-started/welcome/). diff --git a/docs/platform-services/automation-service/app-central/integrations/lastline-analyst.md b/docs/platform-services/automation-service/app-central/integrations/lastline-analyst.md index 61a05aafa3..624c2a1285 100644 --- a/docs/platform-services/automation-service/app-central/integrations/lastline-analyst.md +++ b/docs/platform-services/automation-service/app-central/integrations/lastline-analyst.md @@ -20,8 +20,23 @@ Utilize Lastline AI-powered sandboxing to triage incidents. ## Configure Lastline Analyst in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Lastline API URL, for example, `https://analysis.lastline.com` + +* **API Key**. Enter your Lastline [API key](https://analysis.lastline.com/analysis/api-docs/html/api.html). + +* **API Token**. Enter your Lastline [API token](https://analysis.lastline.com/analysis/api-docs/html/api.html). +* +* +* +* Lastline Analyst configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v4.md b/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v4.md index edaa9208ee..65c9f4adc5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v4.md +++ b/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v4.md @@ -28,8 +28,20 @@ Email Security ## Configure Libraesva Email Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Libraesva URL. + +* +* +* +* Libraesa V4 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v5.md b/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v5.md index f24bcb162d..82215707fe 100644 --- a/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v5.md +++ b/docs/platform-services/automation-service/app-central/integrations/libraesva-email-security-v5.md @@ -27,29 +27,42 @@ Libraesva Email Security V5 is active defense against phishing, 0-day malware, i * **Download Attachment Content** *(Enrichment)* - Fetch message attachment content or download attachment to incident attachments. * **Fetch Message HTML** *(Enrichment)* - Fetch message HTML. +## Generate Libraesva token + +1. To generate the [token](https://docs.libraesva.com/knowledgebase/esg-api/) make sure you provided the URL API, user, and password. +1. Test the resource to check that the credentials are correct. +1. Execute the Generate Token action with the Test Action.
libraesva-email-security-v5-8 +1. Copy the token (without quotation marks).
libraesva-email-security-v5-9 +1. Now you can populate the Token field in the resource below. + ## Configure Libraesva Email Security V5 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL API**. Enter your Libraesva API URL. - * URL API - * User - * Password - * Libraesva Token. The generated token obtained from Generate Token action. (Follow the instructions below in [Generate Libraesva token](#generate-libraesva-token)). - * Impersonate User. For some actions admin privileges are required. - * Cloud SOAR URL. i.e : https://your-cloud-soar-host/incmansuite\_ng - * Cloud SOAR User JWT Token
ipdata configuration +* **User**. Enter the username of a Libraesva admin user authorized to authenticate the integration. -For information about Libraesva Email Security V5, see [Libraesva Email Security V5 documentation](https://docs.libraesva.com/doc/libraesva-esg-5/). +* **Password**. Enter the admin user password. -### Generate Libraesva token +* **Libraesva Token**. Enter the generated token [obtained earlier](#generate-libraesva-token)). -1. To generate the token make sure you provided the URL API, user, and password. -1. Test the resource to check that the credentials are correct. -1. Execute the Generate Token action with the Test Action.
libraesva-email-security-v5-8 -1. Copy the token (without quotation marks).
libraesva-email-security-v5-9 -1. Now you can populate the Token field in the resource. +* **Impersonate User**. Enter an [impersonation user](https://docs.libraesva.com/document/archive-emails-from-exchange/how-to-setup-an-impersonation-account-in-exchange/). For some actions, admin privileges from an impersonation account are required. +* +* +* +* + +ipdata configuration + +For information about Libraesva Email Security V5, see [Libraesva Email Security V5 documentation](https://docs.libraesva.com/doc/libraesva-esg-5/). ## Category diff --git a/docs/platform-services/automation-service/app-central/integrations/logpoint.md b/docs/platform-services/automation-service/app-central/integrations/logpoint.md index 031dd4c775..8e6dd48bb0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/logpoint.md +++ b/docs/platform-services/automation-service/app-central/integrations/logpoint.md @@ -26,8 +26,22 @@ This integration has been developed using a non-standard API that involves web s ## Configure Logpoint in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Logpoint hostname. + +* **Username**. Enter the username of a Logpoint admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* +* Logpoint configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/logrhythm.md b/docs/platform-services/automation-service/app-central/integrations/logrhythm.md index 4c96037a87..86c2a7e9f9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/logrhythm.md +++ b/docs/platform-services/automation-service/app-central/integrations/logrhythm.md @@ -25,8 +25,21 @@ Query and update events in LogRhythm SIEM. ## Configure LogRhythm in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your LogRhythm [hostname](https://docs.logrhythm.com/lrsiem/docs/search-for-hosts). + +* **API Key**. Enter your LogRhythm [API key](https://docs.logrhythm.com/lrapi/docs/alarm-api). +* +* +* +* LogRhythm configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mail-tools.md b/docs/platform-services/automation-service/app-central/integrations/mail-tools.md index 4a273e2658..b65104e393 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mail-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/mail-tools.md @@ -38,11 +38,24 @@ Set of scripts for Emails to perform actions within Cloud SOAR. You can add emai ## Configure Mail Tools in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* +* - * Set the **Cloud SOAR API URL** (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * Provide the **Access ID** and **Access Key** from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys.
Mail Tools configuration +Mail Tools configuration ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/malware-bazaar.md b/docs/platform-services/automation-service/app-central/integrations/malware-bazaar.md index e2c954d7c5..f18d5ac13c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/malware-bazaar.md +++ b/docs/platform-services/automation-service/app-central/integrations/malware-bazaar.md @@ -23,17 +23,27 @@ MalwareBazaar is a project from abuse.ch with the goal of sharing malware sample 1. Visit [Abuse](https://auth.abuse.ch) website. 1. Sign up using your favorite account.
malware-bazaar-1 1. Click on your **account** profile. -1. Copy the content of the **Your API-Key** field.
malware-bazaar-2 +1. Copy the content of the [**Your API-Key**](https://bazaar.abuse.ch/api/#auth_key) field.
malware-bazaar-2 ## Configure MalwareBazaar in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the base API URL. The default value is `https://mb-api.abuse.ch/` - * **Label**. The name for the resource. - * **URL**. The base API URL for WithSecure Elements. Default: 'https://mb-api.abuse.ch/'. - * **API Key**. The API key previously obtained.
MalwareBazaar configuration +* **API Key**. Enter the [API key](https://bazaar.abuse.ch/api/#auth_key) you [obtained previously](#malwarebazaar-configuration). +* +* +* + +MalwareBazaar configuration For information about MalwareBazaar, see [MalwareBazaar documentation](https://bazaar.abuse.ch/api/). diff --git a/docs/platform-services/automation-service/app-central/integrations/malwarebytes-nebula.md b/docs/platform-services/automation-service/app-central/integrations/malwarebytes-nebula.md index 719d75edc9..8648fad177 100644 --- a/docs/platform-services/automation-service/app-central/integrations/malwarebytes-nebula.md +++ b/docs/platform-services/automation-service/app-central/integrations/malwarebytes-nebula.md @@ -42,8 +42,25 @@ Threat Intelligence Reputation ## Configure Malwarebytes Nebula in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Malwarebytes Nebula URL. + +* **Nebula Account ID**. Enter your Malwarebytes Nebula [account ID](https://support.threatdown.com/hc/en-us/articles/27351168135059-Locate-the-Account-ID-for-Nebula). + +* **Client ID**. Enter your Malwarebytes Nebula [client ID](https://support.threatdown.com/hc/en-us/articles/10594516370835-Create-OAuth2-credentials-for-Nebula). + +* **Client Secret**. Enter the secret for the client ID. +* +* +* +* Malwarebytes Nebula configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/manage-engine-desktop-central.md b/docs/platform-services/automation-service/app-central/integrations/manage-engine-desktop-central.md index e360c8df7e..d6bafdccf5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/manage-engine-desktop-central.md +++ b/docs/platform-services/automation-service/app-central/integrations/manage-engine-desktop-central.md @@ -28,8 +28,21 @@ Query data an utilize actions in Desktop Central unified endpoint management (UE ## Configure ManageEngine Desktop Central in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server Host**. Enter your ManageEngine Desktop Central [hostname](https://www.manageengine.com/products/desktop-central/help/getting_started/working_with_desktop_central.html). + +* **Access Token**. Enter your ManageEngine Desktop Central [authentication key](https://www.manageengine.com/products/desktop-central/api/). +* +* +* +* ManageEngine Desktop Central configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence.md b/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence.md index 3d5c31e42b..0e8ec9a5e1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence.md +++ b/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence.md @@ -25,13 +25,25 @@ Mandiant Threat Intelligence is a comprehensive and powerful SaaS platform that ## Configure Mandiant Advantage Threat intelligence in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Mandiant Advantage base API URL. The default value is `https://api.intelligence.mandiant.com` - * **Label**. The name for the resource - * **URL**. The base API URL for WithSecure Elements. Default: 'https://api.intelligence.mandiant.com'. - * **Public Key**. The public key previously obtained. - * **Private Key**. The private key previously obtained.
Mandiant configuration +* **Public Key**. Enter the public key you [previously obtained](#mandiant-threat-intelligence-configuration). + +* **Private Key**. Enter the private key you previously obtained. +* +* +* +* + +Mandiant configuration For information about Mandiant, see the [Mandiant website](https://www.mandiant.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/material-security.md b/docs/platform-services/automation-service/app-central/integrations/material-security.md index d7d0232886..82151c5ddb 100644 --- a/docs/platform-services/automation-service/app-central/integrations/material-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/material-security.md @@ -28,11 +28,23 @@ Updated: Jul 18, 2023*** ## Configure Material Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Material Security URL. - * **API URL**. Enter your URL. - * **API Token**. Insert your token.
Material Security configuration +* **API Token**. Enter your Material Security token. +* +* +* +* + +Material Security configuration For information about Material Security, see the [Material Security website](https://material.security/). diff --git a/docs/platform-services/automation-service/app-central/integrations/mattermost.md b/docs/platform-services/automation-service/app-central/integrations/mattermost.md index 6e3854806b..b84c6a742f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mattermost.md +++ b/docs/platform-services/automation-service/app-central/integrations/mattermost.md @@ -21,13 +21,25 @@ search, and integrations. ## Configure Mattermost in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Mattermost [URL](https://docs.mattermost.com/configure/authentication-configuration-settings.html), for example, `https://XXX.cloud.mattermost.com/` - * **Label**. Name of the resource. - * **URL**. URL of Mattermost, for example `https://xxx.yyy.mattermost.com` is already provided. - * **User Email** - * **Password**
Mattermost configuration +* **User Email**. Enter the Mattermost email for an admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +Mattermost configuration For information about Mattermost, see [Mattermost documentation](https://docs.mattermost.com/index.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/maxmind-v2.md b/docs/platform-services/automation-service/app-central/integrations/maxmind-v2.md index 1712fbc6fc..22d27e43f7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/maxmind-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/maxmind-v2.md @@ -18,12 +18,27 @@ MaxMind provides IP intelligence through the GeoIP brand. Over 5,000 companies u ## Configure MaxMind V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your MaxMind API URL, for example, `https://geoip.maxmind.com` or `https://geolite.info` + +* **Account ID**. Enter a MaxMind [account ID](https://support.maxmind.com/hc/en-us/articles/4412951066779-Find-my-Account-ID). + +* **License key**. Enter a MaxMind [license key](https://support.maxmind.com/hc/en-us/articles/4407111582235-Generate-a-License-Key). +* +* +* +* MaxMind V2 configuration -For information about MaxMind, see [MaxMind documentation](https://dev.maxmind.com/). +For information about MaxMind, see [MaxMind documentation](https://support.maxmind.com/hc/en-us). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/mcafee-atd.md b/docs/platform-services/automation-service/app-central/integrations/mcafee-atd.md index f78deab90f..6269f91b00 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mcafee-atd.md +++ b/docs/platform-services/automation-service/app-central/integrations/mcafee-atd.md @@ -21,8 +21,24 @@ Utilize McAfee Advanced Threat Defenseto gather file reputation and enrichment d ## Configure McAfee ATD in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the URL of your McAfee ATD instance. + +* **Username**. Enter the username of a McAfee ATD admin user authorized to authenticate the integration. + +* **Password**. Enter the admin user password. + +* **Detonate timeout in minutes**. Set the maximum amount of time the integration will wait for a server's response before terminating the connection. Enter the connection timeout time in minutes (for example, `3`). +* +* +* McAfee ATD configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mcafee-esm.md b/docs/platform-services/automation-service/app-central/integrations/mcafee-esm.md index 6a648c022a..783f6a0c5b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mcafee-esm.md +++ b/docs/platform-services/automation-service/app-central/integrations/mcafee-esm.md @@ -29,8 +29,25 @@ Work with McAfee ESM Events, Alarms, and Watchlists. ## Configure McAfee ESM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your McAfee ESM server URL. + +* **Username**. Enter the username for a McAfee ESM admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **McAfee Timezone (Daemon)**. Select your timezone. +* +* +* +* McAfee ESM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mcafee-mvision.md b/docs/platform-services/automation-service/app-central/integrations/mcafee-mvision.md index 483fa0389b..21d3c543df 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mcafee-mvision.md +++ b/docs/platform-services/automation-service/app-central/integrations/mcafee-mvision.md @@ -24,8 +24,25 @@ MVISION EPO: SaaS-based centralized security management platform. ## Configure McAfee MVISION in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your McAfee MVISION server URL. + +* **Client ID**. Enter your [client ID](https://docs.trellix.com/bundle/mvision-endpoint-detection-and-response-product-guide/page/UUID-d4602e2b-5adc-bdb4-c8cf-163997d5cd6e.html). + +* **Client secret**. Enter your client secret. + +* **API key**. Enter your API key. +* +* +* +* McAfee MVISION configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mcafee-network-security-platform-manager-nsm.md b/docs/platform-services/automation-service/app-central/integrations/mcafee-network-security-platform-manager-nsm.md index 5fa63ef0b6..39b4ea93a7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mcafee-network-security-platform-manager-nsm.md +++ b/docs/platform-services/automation-service/app-central/integrations/mcafee-network-security-platform-manager-nsm.md @@ -21,13 +21,25 @@ McAfee Network Security Platform is a purpose-built and intelligent next-generat ## Configure McAfee Network Security Platform Manager (NSM) in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Label**. The name for the resource. - * **URL API** - * **Username** - * **Password**
McAfee Network Security Platform Manager configuration +* +* **URL**. Enter your McAfee Network Security Platform Manager URL. + +* **Username**. Enter the username of a McAfee Network Security Platform Manager admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +McAfee Network Security Platform Manager configuration For information about McAfee Network Security Platform Manager, see [McAfee Network Security Platform documentation](https://docs.trellix.com/bundle/network-security-platform-9.2.x-product-guide/page/GUID-E5A1DDBD-A231-498A-A90B-39D584B6CC45.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/mcafee-web-gateway.md b/docs/platform-services/automation-service/app-central/integrations/mcafee-web-gateway.md index 09870b0cec..a324f0d5bb 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mcafee-web-gateway.md +++ b/docs/platform-services/automation-service/app-central/integrations/mcafee-web-gateway.md @@ -21,8 +21,23 @@ Utilize McAfee Web Gateway to issue containment actions during an active inciden ## Configure McAfee Web Gateway in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your McAfee Web Gateway URL. + +* **Username**. Enter the username of a Web Gateway admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* McAfee Web Gateway configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/micro-focus-service-management.md b/docs/platform-services/automation-service/app-central/integrations/micro-focus-service-management.md index 1870191f5a..2832214ac3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/micro-focus-service-management.md +++ b/docs/platform-services/automation-service/app-central/integrations/micro-focus-service-management.md @@ -18,14 +18,27 @@ ESM SaaS is an analytics-driven enterprise service management solution that comb ## Configure Micro Focus Service Management in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Micro Focus API [URL](https://docs.microfocus.com/SM/9.61/Hybrid/Content/integrations/case_exchange/concepts/iip_general.htm?Highlight=%22tenant%20ID%22), for example, `https://us1-smax.saas.microfocus.com` - * **Label**. The name for the resource - * **API URL**. The API URL 'https://us1-smax.saas.microfocus.com'. - * **Username**. The Micro Focus account username. - * **Password**. The Micro Focus account password. - * **Tenant ID**. the Micro Focus tenant ID.
Micro Focus Service Management configuration +* **Username**. Enter the username of a Micro Focus account user authorized to authenticate the integration. + +* **Password**. Enter the admin user password. + +* **Tenant ID**. Enter your Micro Focus [tenant ID](https://docs.microfocus.com/SM/9.61/Hybrid/Content/integrations/case_exchange/concepts/iip_general.htm?Highlight=%22tenant%20ID%22). +* +* +* +* + +Micro Focus Service Management configuration For information about Micro Focus Service Management, see [Micro Focus Service Manager documentation](https://docs.microfocus.com/SM/9.61/Hybrid/Content/service_manager_doc_set_pD.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-365-defender.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-365-defender.md index 70220df76e..84a6d404c0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-365-defender.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-365-defender.md @@ -30,8 +30,23 @@ EDR ## Configure Microsoft 365 Defender in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Microsoft 365 Defender API URL, for example, `https://api.security.microsoft.com` + +* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. + +* **Application (Client) ID**. Enter your Microsoft 365 Defender [application ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id). +* +* +* +* Microsoft 365 Defender configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-log-analytics.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-log-analytics.md index 0e6fb89726..fd84a9d254 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-log-analytics.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-log-analytics.md @@ -18,8 +18,25 @@ Log Analytics is a tool in the Azure portal that's used to edit and run log quer ## Configure Microsoft Azure Log Analytics in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Tenant**. Enter the [directory (tenant) ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of Microsoft Azure Log Analytics. + +* **Client ID**. Enter your Microsoft Azure Log Analytics [client ID](https://learn.microsoft.com/en-us/answers/questions/1573520/how-to-find-client-id). + +* **Client Secret**. Enter your application (client) secret. + +* **Workspace ID**. Enter your [workspace ID](https://learn.microsoft.com/en-us/answers/questions/1154380/where-is-azure-is-the-primary-key-and-workspace-id). +* +* +* +* Microsoft Azure Log Analytics configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-security-center.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-security-center.md index df5b5a3470..de7606fea8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-security-center.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-azure-security-center.md @@ -29,8 +29,30 @@ Work with Alerts, Policies, Tasks, and other resources with Microsoft Azure Secu ## Configure Microsoft Azure Security Center in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Username**. Enter the username of a Microsoft Azure Security Center admin user authorized to authenticate the integration. + +* **Password**. Enter the admin user password. + +* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. + +* **Application (Client) ID**. Enter your Microsoft 365 Defender [application ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id). + +* **Application (Client) Secret**. Enter your application (client) secret. + +* **Subscription ID**. Enter your [subscription ID](https://learn.microsoft.com/en-us/azure/azure-portal/get-subscription-tenant-id). The subscription ID is a GUID that uniquely identifies your subscription to use Azure services. + +* **Scope**. Enter the [scope](https://learn.microsoft.com/en-us/azure/role-based-access-control/scope-overview) to use. +* +* +* Microsoft Azure Security Center configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-defender-atp.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-defender-atp.md index 0d2cf30c3e..6ee313dad2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-defender-atp.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-defender-atp.md @@ -46,16 +46,30 @@ Microsoft Defender Advanced Threat Protection (ATP) is a product that enables pr ## Configure Microsoft Defender ATP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the [Microsoft Defender API URL](https://learn.microsoft.com/en-us/defender-endpoint/api/exposed-apis-list) for the server that is closer to your geo location: + * `api-us.securitycenter.microsoft.com` + *` api-eu.securitycenter.microsoft.com` + * `api-uk.securitycenter.microsoft.com` - * **Label**. The desired name for the resource. - * **API URL**. Server that is closer to your geo location. - * api-us.securitycenter.microsoft.com - * api-eu.securitycenter.microsoft.com - * api-uk.securitycenter.microsoft.com - * **Directory (Tenant ID)**. Your Tenant ID you copied earlier. - * **Application (Client ID)**. Your Client ID you copied earlier.
Microsoft Defender ATP configuration +* **Directory (Tenant ID)**. Enter the tenant ID you [copied earlier](#microsoft-defender-atp-configuration). + +* **Application (Client) ID**. Enter the client ID you [copied earlier](#microsoft-defender-atp-configuration). + +* **Application (Client) Secret**. Enter the client secret you [copied earlier](#microsoft-defender-atp-configuration). +* +* +* +* + +Microsoft Defender ATP configuration For information about Microsoft Defender for Endpoint (formerly Defender ATP), see [Microsoft Defender for Endpooint documentation](https://learn.microsoft.com/en-us/defender-endpoint/). diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-daemon.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-daemon.md index 7dbe319c29..d7ddf30be3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-daemon.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-daemon.md @@ -177,25 +177,47 @@ When using the Microsoft EWS Daemon action within an automation rule, note that ## Configure Microsoft EWS Daemon in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; -Use the information you set up in [Microsoft EWS configuration](#microsoft-ews-configuration) above: +:::note +Use the information you set up in [Microsoft EWS configuration](#microsoft-ews-configuration) above. +::: + +* * **Host**. Enter the host name of the EWS instance, for example, `outlook.office365.com`. + * **Authentication Method**. Select the [EWS authentication](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/authentication-and-ews-in-exchange) method: * **Basic** * **NTLM** * **OAuth 2.0** + * **Username**. Enter the Microsoft EWS username. + * **Password**. Enter the Microsoft EWS password. + * **Primary SMTP Address**. Enter the [primary SMTP address](https://learn.microsoft.com/en-us/exchange/client-developer/web-service-reference/primarysmtpaddress) for the user. + * **Tenant ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant) for authentication. + * **Client ID**. Enter the client ID for authentication. + * **Client Secret**. Enter the client secret for authentication. -* **Cloud SOAR API URL**. Enter the URL for your Cloud SOAR API, for example, `https://api.sumologic.com`. Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. -* **Access ID**. Enter the access ID from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys. -* **Access Key**. Enter the access key associated with the Sumo Logic access ID entered above. -* **Automation Engine**. Select whether to use [Cloud or Bridge execution](/docs/platform-services/automation-service/automation-service-integrations/#cloud-or-bridge-execution). +* +* +* +* +* +* +* Microsoft EWS Daemon configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-extension.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-extension.md index 2ea36807d7..ca0578217c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-extension.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews-extension.md @@ -41,12 +41,27 @@ Perform actions on Microsoft EWS mailboxes, accounts, and security settings. ## Configure Microsoft EWS Extension in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **PowerShell Host**. Enter your [PowerShell](https://learn.microsoft.com/en-us/powershell/exchange/exchange-management-shell?view=exchange-ps) hostname. + +* **Username**. Enter the username of a Microsoft EWS Extension admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Authentication Method**. Select [**Basic**](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/authentication-and-ews-in-exchange#basic-authentication) or [**NTML**](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/authentication-and-ews-in-exchange#ntlm-authentication). +* +* Microsoft EWS Extension configuration -For information about Microsoft EWS, see [Microsoft Exchange Web Services documentation](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-authenticate-an-ews-application-by-using-oauth). +For information about Microsoft EWS, see [Microsoft Exchange Web Services documentation](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/explore-the-ews-managed-api-ews-and-web-services-in-exchange). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews.md index 58f4239942..1e26100727 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-ews.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-ews.md @@ -144,9 +144,47 @@ Once API permission are added then Admin must consent to a grant these permissio ## Configure Microsoft EWS in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +:::note +Use the information you set up [above](#microsoft-ews-configuration). +::: + +* +* **Host**. Enter your Microsoft EWS host address, for example, `outlook.office365.com` + +* **Authentication Method**. Select the [EWS authentication](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/authentication-and-ews-in-exchange) method: + * **Basic** + * **NTLM** + * **OAuth 2.0** +* **Username**. Enter the Microsoft EWS username. + +* **Password**. Enter the Microsoft EWS password. + +* **Primary SMTP Address**. Enter the [primary SMTP address](https://learn.microsoft.com/en-us/exchange/client-developer/web-service-reference/primarysmtpaddress) for the user. + +* **Tenant ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant) for authentication. + +* **Client ID**. Enter the client ID for authentication. + +* **Client Secret**. Enter the client secret for authentication. +* +* +* +* +* +* +* + Microsoft EWS configuration For information about Microsoft EWS, see [Microsoft Exchange Web Services documentation](https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-authenticate-an-ews-application-by-using-oauth). diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-graph-security.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-graph-security.md index 148f57b862..0d6d4ba09c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-graph-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-graph-security.md @@ -20,8 +20,26 @@ Query the Microsoft Graph Security API and update alerts. ## Configure Microsoft Graph Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Tenant**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. + +* **Username**. Enter the username of a Microsoft Graph Security admin user authorized to authenticate the integration. + +* **Password**. Enter the admin user password. + +* **Application (Client) ID**. Enter your Microsoft Graph Security [application ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id). + +* **Application (Client) Secret**. Enter your application (client) secret. +* +* +* Microsoft Graph Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-onedrive.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-onedrive.md index 9c5364c52c..308444e9e2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-onedrive.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-onedrive.md @@ -22,8 +22,39 @@ Utilize and manipulate files for incident investigation using OneDrive. ## Configure Microsoft OneDrive in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your OneDrive API URL, for example, `https://graph.microsoft.com/v1.0` + +* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). + +* **Authentication Grant Type**. Choose one of the following according to the permissions you add to your app: + * **Password (Delegated Context)** + * **Client Credentials (Application Context)** + +* **Application (Client) ID**. Enter your application ID. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). This is required for both authentication grant types. + +* **Client Secret**. Enter your client secret. This is required for both authentication grant types. + +* **Username**. Enter the username of an admin user authorized to authenticate the integration. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. + +* **Password**. Enter the password for the admin user. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. +* +* +* +* +* +* +* Microsoft OneDrive configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-sentinel.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-sentinel.md index 4b0b1e1ea2..4480a53220 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-sentinel.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-sentinel.md @@ -63,16 +63,41 @@ This documentation outlines the Microsoft Sentinel integration, providing detail ## Configure Microsoft Sentinel in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **Tenant**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. -* Tenant -* Client ID -* Client Secret -* Subscription ID -* Workspace Name -* Resource Group -* Automation Engine
Edit Resource for AWS WAF +* **Client ID**. Enter your Microsoft 365 Defender [application ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id). + +* **Client Secret**. Enter your application (client) secret. + +* **Subscription ID**. Enter your [subscription ID](https://learn.microsoft.com/en-us/azure/azure-portal/get-subscription-tenant-id). The subscription ID is a GUID that uniquely identifies your subscription to use Azure services. + +* **Workspace Name**. Enter your [workspace ID](https://learn.microsoft.com/en-us/answers/questions/1154380/where-is-azure-is-the-primary-key-and-workspace-id). + +* **Resource Group**. Enter the [resource group](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resource-groups-portal) name where the Azure resource is present. + +* **API Root**. Enter the [API root](https://management.azure.com) URL. The default value is `https://management.azure.com`. + +* **Login Endpoint**. Enter the login endpoint URL. The default value is `https://login.microsoftonline.com` +* +* +* +* +* +* +* + +Edit Resource for AWS WAF For information about Microsoft Sentinel, see [Microsoft Sentinel documentation](https://learn.microsoft.com/en-us/azure/sentinel/). diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-sharepoint.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-sharepoint.md index 844f39008c..643e0113c7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-sharepoint.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-sharepoint.md @@ -1,5 +1,5 @@ --- -title: Microsoft Sharepoint +title: Microsoft SharePoint description: '' --- import useBaseUrl from '@docusaurus/useBaseUrl'; @@ -9,30 +9,47 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; ***Version: 1.5 Updated: Sep 19, 2023*** -Utilize Microsoft Sharepoint lists, files, and folders during incident investigations. +Utilize Microsoft SharePoint lists, files, and folders during incident investigations. ## Actions -* **Get List** (*Enrichment*) - Gather a specified list from Sharepoint. -* **Get Lists** (*Enrichment*) - Gather all lists from Sharepoint. +* **Get List** (*Enrichment*) - Gather a specified list from SharePoint. +* **Get Lists** (*Enrichment*) - Gather all lists from SharePoint. * **Get List Item Files** (*Enrichment*) - Gather all files for a specific item. -* **Get Files** (*Enrichment*) - Gather all files from Sharepoint. -* **Get Folders** (*Enrichment*) - Gather all folders from Sharepoint. +* **Get Files** (*Enrichment*) - Gather all files from SharePoint. +* **Get Folders** (*Enrichment*) - Gather all folders from SharePoint. * **Get List Item File** (*Enrichment*) - Gather a specific file from an item. -* **Get File** (*Enrichment*) - Gather a specific file from Sharepoint. -* **Get List Fields** (*Enrichment*) - Gather all list fields from Sharepoint. +* **Get File** (*Enrichment*) - Gather a specific file from SharePoint. +* **Get List Fields** (*Enrichment*) - Gather all list fields from SharePoint. * **Create List** (*Notification*) - Create a new list. -* **Add File** (*Notification*) - Add a new file to Sharepoint. +* **Add File** (*Notification*) - Add a new file to SharePoint. * **Add List Item** (*Notification*) - Add a new list item. * **Add List Item File** (*Notification*) - Add a new file to an existing list item. -## Configure Microsoft Sharepoint in Automation Service and Cloud SOAR +## Configure Microsoft SharePoint in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the SharePoint API URL, for example, `https://example.sharepoint.com` -Microsoft Sharepoint configuration +* **Site**. Enter your [SharePoint site](https://learn.microsoft.com/en-us/sharepoint/manage-site-creation). + +* **Username**. Enter the username of a SharePoint admin user authorized to authenticate the integration. + +* **Password**. Enter the admin user password. +* +* +* +* + +Microsoft SharePoint configuration For information about Microsoft SharePoint, see [SharePoint documentation](https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/sharepoint-admin-apis-authentication-and-authorization). diff --git a/docs/platform-services/automation-service/app-central/integrations/microsoft-teams.md b/docs/platform-services/automation-service/app-central/integrations/microsoft-teams.md index 70985ca5fc..44c51bc530 100644 --- a/docs/platform-services/automation-service/app-central/integrations/microsoft-teams.md +++ b/docs/platform-services/automation-service/app-central/integrations/microsoft-teams.md @@ -374,22 +374,40 @@ For detailed API documentation visit [**https://docs.microsoft.com/en-us/graph/a ## Configure Microsoft Teams in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - * **Label**. The resource name. - * **API URL**. The default Microsoft Graph API URL is 'https://graph.microsoft.com/v1.0'. - * **Tenant ID**. Directory (Tenant) ID (You can check from you app registration page). - * **Authentication Grant Type**. You can choose any value from the following according to the permissions you add to your App: - * Password (Delegated Context) - * Client Credentials (Application Context) - * **Client ID**. Application (Client) ID, Required for both Authentication Grant Type (You can check from you app registration page). - * **Client Secret**. Application (Client) Secret, Required for both Authentication Grant Type (Client Secret that you copied earlier). - * **Username**. Required only for Authentication Grant Type Password (Delegated Context) leave this field empty if you set **Authentication Grant Type** as Client Credentials (Application Context). - * **Password**. Required only for Authentication Grant Type Password (Delegated Context) leave this field empty if you set **Authentication Grant Type** as Client Credentials (Application Context). - * **Cloud SOAR URL**. Provide the SOAR URL in format 'https://your-cloud-soar-host/incmansuite\_ng' (this field is only required and use in Triggers). - * **Cloud SOAR JWT Token**. Provide your SOAR JWT which you can copy from your profile section (this field is only required and use in Triggers). - * **Team Incident Internal Field Name**. To save Team ID in Incident Field, Required only for Triggers, For Example: opt\_1.
Microsoft Teams configuration +:::note +Use the information you set up [above](#microsoft-teams-configuration). +::: + +* +* **API URL**. Enter your Microsoft Teams API URL. The default URL is `https://graph.microsoft.com/v1.0` + +* **Tenant ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). + +* **Authentication Grant Type**. Choose one of the following according to the permissions you add to your app: + * **Password (Delegated Context)** + * **Client Credentials (Application Context)** + +* **Client ID**. Enter your application ID. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). This is required for both authentication grant types. + +* **Client Secret**. Enter your client secret. This is required for both authentication grant types. + +* **Username**. Enter the username of an admin user authorized to authenticate the integration. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. + +* **Password**. Enter the password for the admin user. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. +* +* +* +* + +Microsoft Teams configuration For information about Microsoft Teams, see [Microsoft Teams documentation](https://learn.microsoft.com/en-us/microsoftteams/). diff --git a/docs/platform-services/automation-service/app-central/integrations/mimecast.md b/docs/platform-services/automation-service/app-central/integrations/mimecast.md index 8ce44a20b8..fd5c8e579c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mimecast.md +++ b/docs/platform-services/automation-service/app-central/integrations/mimecast.md @@ -28,8 +28,27 @@ To configure Mimecast, see [Mimecast documentation](https://integrations.mimecas ## Configure Mimecast in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the Mimecast base URL including region. For example, `https://us-api.mimecast.com` + +* **Access Key**. Enter the Mimecast [access key](https://mimecastsupport.zendesk.com/hc/en-us/articles/34000328220691-API-Integrations-Managing-API-1-0-for-Cloud-Gateway#h_01J9NHPTM1WHT43ZW6E34BEJMB). + +* **Secret Key**. Enter the Mimecast secret key associated with the access key. + +* **Application ID**. Enter the Mimecast [application ID](https://mimecastsupport.zendesk.com/hc/en-us/articles/34000328220691-API-Integrations-Managing-API-1-0-for-Cloud-Gateway#h_01J9NHPTM0SBEQH63A2AZBP9YA). + +* **Application Key**. Enter the Mimecast application key associated with the application ID. +* +* +* +* Mimecast configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/misp.md b/docs/platform-services/automation-service/app-central/integrations/misp.md index 9b1dedb62f..80744a309e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/misp.md +++ b/docs/platform-services/automation-service/app-central/integrations/misp.md @@ -28,8 +28,21 @@ Utilize MISP intelligence data during incident investigations. ## Configure MISP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your MISP server URL, for example, `https://192.0.0.1` + +* **API Key**. Enter your MISP [API key](https://www.circl.lu/doc/misp/automation/#creating-an-automation-key-using-advanced-authkeys). +* +* +* +* MISP configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mitre-matrix.md b/docs/platform-services/automation-service/app-central/integrations/mitre-matrix.md index 32aafe1fa6..5e46987c92 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mitre-matrix.md +++ b/docs/platform-services/automation-service/app-central/integrations/mitre-matrix.md @@ -1,5 +1,5 @@ --- -title: Mitre Matrix +title: MITRE Matrix description: '' --- import useBaseUrl from '@docusaurus/useBaseUrl'; @@ -23,15 +23,26 @@ MITRE is a globally-accessible knowledge base of adversary tactics and technique * [pyattck](https://github.com/swimlane/pyattck/blob/master/LICENSE.md) -## Configure Mitre Matrix in Automation Service and Cloud SOAR +## Configure MITRE Matrix in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Update MITRE ATT&CK**. Select to get the latest MITRE techniques, tactics, etc. +* +* +* +* -Mitre Matrix configuration +MITRE Matrix configuration -For information about Mitre Matrix, see [Mitre Matrix documentation](https://attack.mitre.org/). +For information about MITRE Matrix, see [MITRE Matrix documentation](https://attack.mitre.org/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/mssql.md b/docs/platform-services/automation-service/app-central/integrations/mssql.md index cfde77874c..c18f66714a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mssql.md +++ b/docs/platform-services/automation-service/app-central/integrations/mssql.md @@ -22,8 +22,23 @@ This Integration does not support client-side encryption. ## Configure MSSQL in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **SQL Server**. Enter the address of the [MSSQL server](https://learn.microsoft.com/en-us/sql/sql-server/?view=sql-server-ver17). + +* **SQL Database**. Enter the name of the [MSSQL database](https://learn.microsoft.com/en-us/sql/relational-databases/lesson-1-connecting-to-the-database-engine?view=sql-server-ver17). + +* **SQL Username**. Enter the username of the MSSQL user. + +* **SQL Password**. Enter the password of the MSSQL user. +* +* MSSQL configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/mxtoolbox.md b/docs/platform-services/automation-service/app-central/integrations/mxtoolbox.md index e5d3b32524..b8673299a9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/mxtoolbox.md +++ b/docs/platform-services/automation-service/app-central/integrations/mxtoolbox.md @@ -18,8 +18,20 @@ Utilize MXToolbox to gather MX records for enrichment data during incident inves ## Configure MxToolbox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your MxToolbox URL. + +* **API Key**. Enter an MxToolbox [API key](https://mxtoolbox.com/support/knowledgebase/?ticketClass=API). +* +* +* MxToolbox configuration @@ -29,8 +41,4 @@ For information about MxToolbox, see [MxToolbox documentation](https://mxtoolbox * February 14, 2020 - First upload * January 13 ,2023 - General improvements -* June 23, 2023 (v1.1) - Updated the integration with Environmental Variables - - - - +* June 23, 2023 (v1.1) - Updated the integration with Environmental Variables \ No newline at end of file diff --git a/docs/platform-services/automation-service/app-central/integrations/netskope-v2.md b/docs/platform-services/automation-service/app-central/integrations/netskope-v2.md index 9c839e5384..046a0648a2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/netskope-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/netskope-v2.md @@ -39,12 +39,28 @@ When finished, click **OK**. After being created, tokens can be managed by click ## Configure Netskope V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter the URL for API V2 REST API in the format `https://.goskope.com` - * **Server URL**. URL for API V2 REST API (https://<tenant-name>.goskope.com). - * **Token**. The Token you copied earlier. - * Additionally, if need you can populate the query daemons.
netskope-v2 +* **Tenant API Token**. Enter the [API token](https://docs.netskope.com/en/api-tokens-2/) you [copied earlier](#neskope-v2-configuration). + +* **Event Type**. Select the [event type](https://docs.netskope.com/en/skope-it-query-language/#event-types) (additionally, if you need to, you can populate the query daemons): + * **Application** + * **Page** + * **Audit** +* +* +* +* + +netskope-v2 For information about Netskope V2, see [Netskope V2 documentation](https://docs.netskope.com/en/rest-api-v2-overview-312207/). diff --git a/docs/platform-services/automation-service/app-central/integrations/netskope.md b/docs/platform-services/automation-service/app-central/integrations/netskope.md index 108c45743a..aa37a6adc1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/netskope.md +++ b/docs/platform-services/automation-service/app-central/integrations/netskope.md @@ -24,8 +24,26 @@ Manage and steer traffic, give visibility of network activities, and analytics t ## Configure Netskope in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter the Netskope URL in the format `https://.goskope.com` + +* **Tenant API Token**. Enter a Netskope [API token](https://docs.netskope.com/en/api-tokens-2/). + +* **Event Type**. Select the [event type](https://docs.netskope.com/en/skope-it-query-language/#event-types) (additionally, if you need to, you can populate the query daemons): + * **Application** + * **Page** + * **Audit** +* +* +* +* Netskope configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/neurons-itsm.md b/docs/platform-services/automation-service/app-central/integrations/neurons-itsm.md index ca173c2d69..7285245540 100644 --- a/docs/platform-services/automation-service/app-central/integrations/neurons-itsm.md +++ b/docs/platform-services/automation-service/app-central/integrations/neurons-itsm.md @@ -28,11 +28,23 @@ To [view your API Key](https://help.ivanti.com/ht/help/en_US/ISM/2025/admin-user ## Configure Neurons ITSM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Tenant URL**. Enter your Neurons ITSM [tenant URL](https://help.ivanti.com/ht/help/en_US/ISM/2025/admin-user/Content/Configure/LogIn/Log_In_Using_URLs.htm). - * **Tenant URL**. Enter your tenant url. - * **API Key**. The API Key you copied earlier.
Neurons ITSM configuration +* **API Key**. The [API key](https://help.ivanti.com/ht/help/en_US/ISM/2025/admin-user/Content/Configure/API/Using-REST-API-Key.htm) you [copied earlier](#neurons-itsm-configuration). +* +* +* +* + +Neurons ITSM configuration For information about Neurons for ITSM, see [Neurons or ITSM documentation](https://help.ivanti.com/ht/help/en_US/ISM/2025/admin-user/Content/Common/Getting%20Started.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/neustar-ip-geopoint.md b/docs/platform-services/automation-service/app-central/integrations/neustar-ip-geopoint.md index 9381d09184..cc903eb243 100644 --- a/docs/platform-services/automation-service/app-central/integrations/neustar-ip-geopoint.md +++ b/docs/platform-services/automation-service/app-central/integrations/neustar-ip-geopoint.md @@ -18,12 +18,25 @@ IP GeoPoint to gain independent, real-time insights into each website or network ## Configure Neustar IP GeoPoint in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Key**. Enter a Neustar IP GeoPoint API key. + +* **Secret Key**. Enter the secret corresponding to the API key. +* +* +* +* Neustar configuration -For information about Neustar, see [Neustar documentation](https://www.home.neustar/). +For information about Neustar, see the [Neustar website](https://www.home.neustar/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/nmap.md b/docs/platform-services/automation-service/app-central/integrations/nmap.md index fdb3f06fdb..570542c193 100644 --- a/docs/platform-services/automation-service/app-central/integrations/nmap.md +++ b/docs/platform-services/automation-service/app-central/integrations/nmap.md @@ -22,11 +22,23 @@ Nmap is a free and open-source network scanner. Nmap is used to discover hosts a ## Configure Nmap in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your Nmap API URL. The default value is `https://api.nmap.online` - * **URL**. Your URL default ('https://api.nmap.online'/). - * **Api Key**. Insert the API Key.
Nmap configuration +* **Api Key**. Enter your Nmap API Key. +* +* +* +* + +Nmap configuration For information about Nmap, see [Nmap documentation](https://nmap.org/book/man.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/nozomi-networks.md b/docs/platform-services/automation-service/app-central/integrations/nozomi-networks.md index 0fbb59f5c9..7695f21538 100644 --- a/docs/platform-services/automation-service/app-central/integrations/nozomi-networks.md +++ b/docs/platform-services/automation-service/app-central/integrations/nozomi-networks.md @@ -23,8 +23,23 @@ Utilize Nozomi Networks to gain visibility across OT, IoT, and IT environments. ## Configure Nozomi Networks in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Nozomi Networks URL. + +* **Username**. Enter the username of a Nozomi Networks admin user. + +* **Password**. Enter the password for the admin user. +* +* +* +* Nozomi Networks configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/nucleon-cyber.md b/docs/platform-services/automation-service/app-central/integrations/nucleon-cyber.md index d179834583..598c51d236 100644 --- a/docs/platform-services/automation-service/app-central/integrations/nucleon-cyber.md +++ b/docs/platform-services/automation-service/app-central/integrations/nucleon-cyber.md @@ -20,8 +20,27 @@ Nucleon Cyber framework for threat intelligence - perform in-depth analysis, ver ## Configure Nucleon Cyber in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Nucleon Cyber host address. + +* **User**. Enter the username of a Nucleon Cyber admin user. + +* **Password**. Enter the password for the amin user. + +* **Client ID**. Enter a Nucleon Cyber client ID. + +* **Usrn**. Enter your Nucleon Cyber Universal Security Reconnaissance Network name. +* +* +* +* Nucleon Cyber configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/okta.md b/docs/platform-services/automation-service/app-central/integrations/okta.md index f9acc7d7f3..cabbcf273a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/okta.md +++ b/docs/platform-services/automation-service/app-central/integrations/okta.md @@ -41,8 +41,23 @@ Interact with Okta users, groups, and system logging information. ## Configure Okta in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Domain**. Enter your [Okta domain](https://developer.okta.com/docs/guides/find-your-domain/main/). + +* **Token**. Enter an [Okta token](https://support.okta.com/help/s/article/How-to-create-an-API-token?language=en_US). + +* **API Version**. Enter your [Okta API version](https://developer.okta.com/docs/api/#api-versions). +* +* +* +* Okta configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/onelogin.md b/docs/platform-services/automation-service/app-central/integrations/onelogin.md index 4102911ee6..8170074588 100644 --- a/docs/platform-services/automation-service/app-central/integrations/onelogin.md +++ b/docs/platform-services/automation-service/app-central/integrations/onelogin.md @@ -29,8 +29,23 @@ This integration enables user management and secure app access with MFA and even ## Configure OneLogin in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [OneLogin URL](https://support.onelogin.com/kb/4266967/onelogin-domains-and-ip-addresses). + +* **Client ID**. Enter a OneLogin [client ID](https://developers.onelogin.com/api-docs/1/getting-started/working-with-api-credentials). + +* **Client Secret**. Enter the secret corresponding to the client ID. +* +* +* +* OneLogin configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/onetrust.md b/docs/platform-services/automation-service/app-central/integrations/onetrust.md index 108b273c27..0fbfc6c8e5 100644 --- a/docs/platform-services/automation-service/app-central/integrations/onetrust.md +++ b/docs/platform-services/automation-service/app-central/integrations/onetrust.md @@ -28,8 +28,21 @@ OneTrust is a technology platform that helps organizations comply with privacy a ## Configure OneTrust in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your OneTrust [environment URL](https://my.onetrust.com/s/article/UUID-9abee0a7-3417-4553-f7fb-f2a0c2fc6b2a?language=en_US) in the format `https://`, for example `https://app-eu.onetrust.com` + +* **API Key**. Enter a OneTrust [API key](https://my.onetrust.com/s/article/UUID-76f55697-ba16-d000-849a-d33e3d217f41?language=en_US). +* +* +* +* OneTrust configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/openai-chatgpt.md b/docs/platform-services/automation-service/app-central/integrations/openai-chatgpt.md index 5b76ef2692..62e4f92de2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/openai-chatgpt.md +++ b/docs/platform-services/automation-service/app-central/integrations/openai-chatgpt.md @@ -37,13 +37,25 @@ Because *gpt-3.5-turbo* performs at a similar capability to *text-davinci-003* b ## Configure OpenAI ChatGPT in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your OpenAI ChatGPT API URL, for example, `https://api.openai.com/` - * **Label**. The name of the resource. - * **API URL**. `https://api.openai.com/`. - * **API Key**. Your OpenAI API Key. - * Disclaimer: Kindly review and acknowledge the disclaimer provided in the integration resource.
OpenAI ChatGPT configuration +* **API Key**. Enter the OpenAI [API key](https://platform.openai.com/docs/api-reference/admin-api-keys) you [obtained earlier](#openai-chatgpt-configuration). + +* **Disclaimer**. Review and acknowledge the disclaimer. +* +* +* +* + +OpenAI ChatGPT configuration For information about OpenAI, see [OpenAI documentation](https://platform.openai.com/docs/api-reference/introduction). diff --git a/docs/platform-services/automation-service/app-central/integrations/openldap.md b/docs/platform-services/automation-service/app-central/integrations/openldap.md index 2ad370d8fb..6604405858 100644 --- a/docs/platform-services/automation-service/app-central/integrations/openldap.md +++ b/docs/platform-services/automation-service/app-central/integrations/openldap.md @@ -22,8 +22,29 @@ OpenLDAP Software is an open-source implementation of the Lightweight Directory ## Configure OpenLDAP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your OpenLDAP host address, for example, `192.168.0.1` + +* **Login Port**. Enter `636` or `389`. + +* **Login DN**. Enter your login DN, for example, `cn=admin,dc=example,dc=com` + +* **Password**. Enter the password for the login. + +* **Base DN**. Enter your base DN. + +* **Global Catalog or DN Port**. For global catalog E=enter `3268` for LDAP, or enter `3269` for secure LDAPS. +* +* +* +* OpenLDAP configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/opentext-encase-endpoint-security.md b/docs/platform-services/automation-service/app-central/integrations/opentext-encase-endpoint-security.md index 98483d54d3..82dd9ee3a1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/opentext-encase-endpoint-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/opentext-encase-endpoint-security.md @@ -27,12 +27,29 @@ Collect evidence, create events and investigations, and issue containment action ## Configure OpenText EnCase Endpoint Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Protocol**. Select **HTTP** or **HTTPS** for the protocol to use. + +* **IP/Hostname**. Enter your OpenText EnCase host address. + +* **Port**. Enter your OpenText EnCase port. + +* **API Key**. Enter an OpenText EnCase API key. +* +* +* +* OpenText EnCase Endpoint Security configuration -For information about OpenText EnCase Endpoint Security, see the [OpenText EnCase Endpoint Security website](https://www.opentext.com/products/encase-endpoint-security). +For information about OpenText EnCase Endpoint Security, see the [OpenText documentation](https://docs.microfocus.com/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/opswat-metadefender.md b/docs/platform-services/automation-service/app-central/integrations/opswat-metadefender.md index 616a4a810a..a48609b4b9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/opswat-metadefender.md +++ b/docs/platform-services/automation-service/app-central/integrations/opswat-metadefender.md @@ -24,8 +24,21 @@ MetaDefender is a cybersecurity platform for preventing and detecting cybersecur ## Configure Opswat Metadefender in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Opswat Metadefender URL](https://www.opswat.com/docs/mdkiosk/configuration/configuring-with-metadefender-core#detecting-the-metadefender-core-server-url). + +* **API Key**. Enter an Opswat Metadefender [API key](https://www.opswat.com/docs/mdcore/sandbox/integrating-deep-cdr-analysis-mode-version). +* +* +* +* Opswat Metadefender configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/pagerduty.md b/docs/platform-services/automation-service/app-central/integrations/pagerduty.md index 7ce0497f57..4f4fff3c87 100644 --- a/docs/platform-services/automation-service/app-central/integrations/pagerduty.md +++ b/docs/platform-services/automation-service/app-central/integrations/pagerduty.md @@ -31,8 +31,21 @@ Utilize PagerDuty to notify responders during the incident response process. ## Configure PagerDuty in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your PagerDuty [API](https://developer.pagerduty.com/docs/rest-api-overview) URL, for example, `api.pagerduty.com` + +* **Token**. Enter https://developer.pagerduty.com/docs/user-oauth-token-via-code-granthttps://developer.pagerduty.com/docs/oauth-functionality). +* +* +* +* PagerDuty configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/palo-alto-autofocus.md b/docs/platform-services/automation-service/app-central/integrations/palo-alto-autofocus.md index 70bec29568..6ec4cf0bab 100644 --- a/docs/platform-services/automation-service/app-central/integrations/palo-alto-autofocus.md +++ b/docs/platform-services/automation-service/app-central/integrations/palo-alto-autofocus.md @@ -19,8 +19,21 @@ Utilize Palo Alto Auto Focus threat intelligence feeds during incident investiga ## Configure Palo Alto AutoFocus in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter your Palo Alto [endpoint URL](https://docs.paloaltonetworks.com/autofocus/autofocus-api/about-the-autofocus-api/autofocus-api-resources), for example, `https://autofocus.paloaltonetworks.com` + +* **API Key**. Enter an AutoFocus [API key](https://docs.paloaltonetworks.com/autofocus/autofocus-api/get-started-with-the-autofocus-api/get-your-api-key). +* +* +* +* Palo Alto AutoFocus configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-ngfw.md b/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-ngfw.md index 1023ad483f..57eedda436 100644 --- a/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-ngfw.md +++ b/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-ngfw.md @@ -30,8 +30,20 @@ Issue containment actions during incident investigation through Palo Alto NGFW. ## Configure Palo Alto Networks NGFW in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Palo Alto Networks NGFW URL. + +* **API Key**. Enter a Palo Alto Networks NGFW [API key](https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/manage-firewall-administrators/configure-administrative-accounts-and-authentication/configure-api-key-lifetime#:~:text=After%20you%20specify%20the%20key,the%20API%20Keys%20Last%20Expired.). +* +* +* Palo Alto Networks NGFW configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-panorama-v2.md b/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-panorama-v2.md index 78e8b9a474..16a5380459 100644 --- a/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-panorama-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/palo-alto-networks-panorama-v2.md @@ -80,8 +80,21 @@ Utilize Palo Alto Panorama to list current applications and issue containment ac ## Configure Palo Alto Networks Panorama V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the [API URL](https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/explore-the-api/use-the-api-browser) for your instance of Palo Alto Networks Panorama, for example, `https://192.168.0.10` + +* **API Key**. Enter an [API key](https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/get-your-api-key#idca192ed7-45df-4992-a0f7-41ebe94fbdac) for Palo Alto Networks Panorama. +* +* +* +* Palo Alto Networks Panorama V2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/panda-edr.md b/docs/platform-services/automation-service/app-central/integrations/panda-edr.md index 4b0f3e4adc..6cc2d7ced1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/panda-edr.md +++ b/docs/platform-services/automation-service/app-central/integrations/panda-edr.md @@ -33,8 +33,27 @@ EDR ## Configure Panda EDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the [API URL](https://www.watchguard.com/help/docs/api/Content/en-US/api_get_started/make_requests.html) for WatchGuard, for example, `https://api.usa.cloud.watchguard.com` + +* **Access ID**. Enter a WatchGuard [access ID](https://www.watchguard.com/help/docs/api/Content/en-US/api_get_started/authentication.html). + +* **Password**. Enter the password for the access ID. + +* **WatchGuard API Key**. Enter the [API key associated with your WatchGuard Cloud account](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/mngd-access_enable-API-access.html) (shown on the [Managed Access](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/mngd-access.html) page in WatchGuard Cloud). + +* **Account ID**. Enter your WatchGuard Cloud account ID, as shown on the [My Account page](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/sub_acct-mgmt-page.html) in WatchGuard Cloud. For example, `WGC-1-123abc456` or `ACC-1234567`. +* +* +* +* Panda EDR configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/passive-total.md b/docs/platform-services/automation-service/app-central/integrations/passive-total.md index 9e57221ad1..4c08623acf 100644 --- a/docs/platform-services/automation-service/app-central/integrations/passive-total.md +++ b/docs/platform-services/automation-service/app-central/integrations/passive-total.md @@ -1,5 +1,5 @@ --- -title: Passive Total +title: PassiveTotal description: '' --- import useBaseUrl from '@docusaurus/useBaseUrl'; @@ -15,15 +15,30 @@ IP and Domain Information. * **Whois** (*Enrichment*) - Gather IP or Domain information. -## Configure Passive Total in Automation Service and Cloud SOAR +## Configure PassiveTotal in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter your PassiveTotal [endpoint address](https://passivetotal.readthedocs.io/en/latest/getting-started.html), for example, `https://api.passivetotal.org/v2` -Passive Total configuration +* **Username/Key**. Enter your PassiveTotal [API key](https://passivetotal.readthedocs.io/en/latest/getting-started.html#obtain-api-keys). -For information about Passive Total, see [Passive Total documentation](https://passivetotal.readthedocs.io/en/latest/#). +* **API Secret**. Enter the secret for the key. +* +* +* +* + +PassiveTotal configuration + +For information about PassiveTotal, see [PassiveTotal documentation](https://passivetotal.readthedocs.io/en/latest/#). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/phantombuster.md b/docs/platform-services/automation-service/app-central/integrations/phantombuster.md index 0f41fc7d24..b6755689df 100644 --- a/docs/platform-services/automation-service/app-central/integrations/phantombuster.md +++ b/docs/platform-services/automation-service/app-central/integrations/phantombuster.md @@ -27,12 +27,23 @@ Follow the steps from the Phantombuster [guide](https://hub.phantombuster.com/do ## Configure Phantombuster in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Phantombuster [host URL](https://hub.phantombuster.com/docs/api#versioning), for example, `https://phantombuster.com`. - * **Label**. The name for the resource. - * **URL**. Phantombuster host URL. - * **API Key**. Your Phantombuster api key.
Phantombuster configuration +* **API Key**. Enter your Phantombuster [API key](https://hub.phantombuster.com/docs/api#how-to-find-my-api-key). +* +* +* +* + +Phantombuster configuration For information about Phantombuster, see [Phantombuster documentation](https://hub.phantombuster.com/docs/developer-quick-start). diff --git a/docs/platform-services/automation-service/app-central/integrations/phishlabs-drp.md b/docs/platform-services/automation-service/app-central/integrations/phishlabs-drp.md index 16db147087..51abf40f47 100644 --- a/docs/platform-services/automation-service/app-central/integrations/phishlabs-drp.md +++ b/docs/platform-services/automation-service/app-central/integrations/phishlabs-drp.md @@ -24,13 +24,25 @@ Digital Risk Protection from PhishLabs protects your organization's critical dig ## Configure PhishLabs DRP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Label**. The desired name for the resource. - * **URL**. Your PhishLabs DRP URL. - * **Username**. Your PhishLabs DRP username you copied earlier from PhishLabs DRP. - * **Password**. Your PhishLabs DRP password you copied earlier from PhishLabs DRP.
PhishLabs DRP configuration +* +* **URL**. Enter your PhishLabs DRP URL. + +* **Username**. Enter the username of a PhishLabs DRP admin user authorized to authenticate the integration. + +* **Password**. Enter the password of the admin user. +* +* +* +* + +PhishLabs DRP configuration For information about PhishLabs, see the [PhishLabs website](https://www.phishlabs.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-incident-data.md b/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-incident-data.md index 38218d3b2d..33250ab952 100644 --- a/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-incident-data.md +++ b/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-incident-data.md @@ -19,14 +19,27 @@ PhishLabs by Fortra is a cyber threat intelligence company that delivers Digital ## Configure PhishLabs EIR - Incident Data in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your PhishLabs EIR URL. - * **Label**. The desired name for the resource. - * **URL**. Your PhishLabs EIR - IOC Feed API URL. - * **Username**. Your PhishLabs EIR - IOC Feed Username. - * **Password**. Your PhishLabs EIR - IOC Feed API Password. - * **Service**. Specific PhishLabs service.
PhishLabs EIR configuration +* **Username**. Enter the username of a PhishLabs EIR admin user authorized to authenticate the integration. + +* **Password**. Enter the password of the admin user. + +* **Service**. Enter your specific PhishLabs service. +* +* +* +* + +PhishLabs EIR configuration For information about PhishLabs, see the [PhishLabs website](https://www.phishlabs.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-ioc-feed.md b/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-ioc-feed.md index d979093033..203ec19ab1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-ioc-feed.md +++ b/docs/platform-services/automation-service/app-central/integrations/phishlabs-eir-ioc-feed.md @@ -19,13 +19,25 @@ PhishLabs by Fortra is a cyber threat intelligence company that delivers Digital ## Configure PhishLabs EIR - IOC Feed in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your PhishLabs EIR - IOC API URL. - * **Label**. The desired name for the resource. - * **URL**. Your PhishLabs EIR - IOC Feed API URL. - * **Username**. Your PhishLabs EIR - IOC Feed Username. - * **Password**. Your PhishLabs EIR - IOC Feed API Password.
PhishLabs EIR IOC Feed configuration +* **Username**. Enter the username of a PhishLabs EIR - IOC admin user authorized to authenticate the integration. + +* **Password**. Enter the password of the admin user. +* +* +* +* + +PhishLabs EIR IOC Feed configuration For information about PhishLabs, see the [PhishLabs website](https://www.phishlabs.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/phishtank.md b/docs/platform-services/automation-service/app-central/integrations/phishtank.md index 4e057dd677..8912683b1f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/phishtank.md +++ b/docs/platform-services/automation-service/app-central/integrations/phishtank.md @@ -18,8 +18,21 @@ Query the URL reputation via PhishTank. ## Configure PhishTank in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your PhishTank server URL, for example, `https://www.phishtank.com`. + +* **API Key**. Enter an [API key](https://phishtank.org/faq.php#howdoigetanapikey) for PhishTank. +* +* +* +* PhishTank configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/pop3.md b/docs/platform-services/automation-service/app-central/integrations/pop3.md index 2c80ad38cb..47b07d5374 100644 --- a/docs/platform-services/automation-service/app-central/integrations/pop3.md +++ b/docs/platform-services/automation-service/app-central/integrations/pop3.md @@ -22,8 +22,31 @@ Allows you to connect your mailbox with Cloud SOAR and receive emails via POP3 p ## Configure POP3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **POP Server**. Enter your [POP3 server address](https://www.wikihow.com/Find-Incoming-Mail-Server), for example, `pop.gmail.com`. + +* **Port**. Enter your [POP3 port](https://www.wikihow.com/Find-Incoming-Mail-Server), for example, `995`. + +* **Username**. Enter the username of a POP3 admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* +* +* +* POP3 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/powershell-tools.md b/docs/platform-services/automation-service/app-central/integrations/powershell-tools.md index 58e0eedc87..b3a756311f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/powershell-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/powershell-tools.md @@ -179,14 +179,30 @@ Remarks: ## Configure PowerShell Tools in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Domain Name (PowerShell Window Host)**. Specify the domain nme ([hostname](https://learn.microsoft.com/en-us/powershell/scripting/developer/hosting/windows-powershell-host-quickstart?view=powershell-7.5)) for Window Server, for example, `192.168.1.10` or `my-computer.csoar.local`. - * **Label**. The desired name for the resource. - * **Domain Name** (PowerShell Window Host). Specify Domain Name (Hostname) for Window Server e.g 192.168.1.10 or my-computer.csoar.local. - * **Username**. Username of your window host. - * **Password**. Password of your window host. - * **Hostname** (To Resolve in Docker). Hostname (To Resolve in Docker) e.g 10.0.0.24 test.local.
Powershell Tools configuration +* **Username**. Enter the username of your Window host, either a Local or Domain user. + +* **Password**. Enter the password of your Window host. + +* **Authentication Method**. Select an [authentication method](https://learn.microsoft.com/en-us/windows/win32/winrm/authentication-for-remote-connections#default-authentication-settings): + * **Basic** + * **Kerberos** + * **Negotiate** + +* **Hostname (To Resolve in Docker)**. Enter the hostname, for example, `10.0.0.24 test.local`. +* +* + +Powershell Tools configuration For information about PowerShell, see [PowerShell documentation](https://learn.microsoft.com/en-us/powershell/). diff --git a/docs/platform-services/automation-service/app-central/integrations/prisma-cloud.md b/docs/platform-services/automation-service/app-central/integrations/prisma-cloud.md index fe56b867cc..470a46505b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/prisma-cloud.md +++ b/docs/platform-services/automation-service/app-central/integrations/prisma-cloud.md @@ -25,8 +25,23 @@ Prisma Cloud requires an API access key to enable programmatic access to the RES ## Configure Prisma Cloud in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Prisma Cloud [API URL](https://pan.dev/prisma-cloud/api/cspm/api-urls/). + +* **Username/Access Key ID**. Enter a Prisma Cloud admin username, or an [access key](https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/create-access-keys). + +* **Password/Access Key Secret**. Enter the password for the admin user (if you previously entered a username), or the secret for access key (f you previously entered an access key) +* +* +* +* Prisma Cloud configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/proofpoint-tap.md b/docs/platform-services/automation-service/app-central/integrations/proofpoint-tap.md index 17aa653c41..616ba3dc50 100644 --- a/docs/platform-services/automation-service/app-central/integrations/proofpoint-tap.md +++ b/docs/platform-services/automation-service/app-central/integrations/proofpoint-tap.md @@ -26,13 +26,25 @@ Proofpoint Targeted Attack Protection (TAP) integration which protects against a ## Configure Proofpoint TAP in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Proofpoint TAP API URL. The default is `https://tap-api-v2.proofpoint.com` - * **Label**. Name of the resource - * **URL**. URL of Proofpoint TAP (default URL’ [https://tap-api-v2.proofpoint.com](https://tap-api-v2.proofpoint.com/)’ is already provided). - * Service Principal - * Secret Key
Proofpoint TAP configuration +* **Service Principal**. Enter your Proofpoint TAP service principal. + +* **Secret Key**. Enter the secret key for the service principal. +* +* +* +* + +Proofpoint TAP configuration For information about Proofpoint, see the [Proofpoint website](https://www.proofpoint.com/us/resources/data-sheets/targeted-attack-protection). diff --git a/docs/platform-services/automation-service/app-central/integrations/protectonce.md b/docs/platform-services/automation-service/app-central/integrations/protectonce.md index 1cc6c7ea00..ac8e9be6a9 100644 --- a/docs/platform-services/automation-service/app-central/integrations/protectonce.md +++ b/docs/platform-services/automation-service/app-central/integrations/protectonce.md @@ -20,14 +20,33 @@ The ProtectOnce provides SaaS companies with a radically simplified agentless so ## Configure ProtectOnce in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your ProtectOnce API URL. - * **Server URL**. URL for API. - * **Email**. Email you use to log in into the system. - * **Password**. The password of your email. - * **Application ID**. The id of the application. - * Additionally, if you need you can populate the query daemons.
ProtectOnce configuration +* **Email**. Enter the email that an admin user uses to log in into the system. + +* **Password**. Enter the admin user's password. + +* **Application ID**. Enter the ID of the application. + +* **Query**. Populate the query daemons. + +* **Start Date**. Enter the start date of the query. (Required for daemon action format `%Y-%m-%dT%H:%M:%S.%f`.) + +* **End Date**. Enter the end date of the query. (Required for daemon action format `%Y-%m-%dT%H:%M:%S.%f`.) +* +* +* +* + +ProtectOnce configuration For information about ProtectOnce, see the [ProtectOnce website](https://app.protectonce.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/pulse-secure.md b/docs/platform-services/automation-service/app-central/integrations/pulse-secure.md index 3eebfe3044..f80b97e057 100644 --- a/docs/platform-services/automation-service/app-central/integrations/pulse-secure.md +++ b/docs/platform-services/automation-service/app-central/integrations/pulse-secure.md @@ -32,8 +32,25 @@ Authentication, Identity, and Access Management. ## Configure Pulse Secure in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Pulse Secure server URL. + +* **Username**. Enter the username of a Pulse Secure admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* API Key**. Enter a Pulse Secure API key. +* +* +* +* Pulse Secure configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/pulsedive.md b/docs/platform-services/automation-service/app-central/integrations/pulsedive.md index 49c6499d4b..da47b90a87 100644 --- a/docs/platform-services/automation-service/app-central/integrations/pulsedive.md +++ b/docs/platform-services/automation-service/app-central/integrations/pulsedive.md @@ -23,8 +23,21 @@ Pulsedive is a free analyst-centric threat intelligence platform that offers com ## Configure Pulsedive in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Pulsedive URL. + +* **API Key**. Enter a Pulsedive [API key](https://pulsedive.com/api/). +* +* +* +* Pulsedive configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/qualys-edr.md b/docs/platform-services/automation-service/app-central/integrations/qualys-edr.md index 258bd6169c..f846517b70 100644 --- a/docs/platform-services/automation-service/app-central/integrations/qualys-edr.md +++ b/docs/platform-services/automation-service/app-central/integrations/qualys-edr.md @@ -21,8 +21,21 @@ Collect events from Qualys EDR. ## Configure Qualys EDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Qualys API Server**. Enter the [Qualys API server URL](https://docs.qualys.com/en/edr/api/#t=getting_started%2Fapi_conventions.htm). + +* **JWT Token**. Enter the [JWT token](https://docs.qualys.com/en/edr/api/#t=getting_started%2Fapi_conventions.htm). The token expires in 4 hours. +* +* +* +* Qualys EDR configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/qualys-was.md b/docs/platform-services/automation-service/app-central/integrations/qualys-was.md index 2174b98537..389591d413 100644 --- a/docs/platform-services/automation-service/app-central/integrations/qualys-was.md +++ b/docs/platform-services/automation-service/app-central/integrations/qualys-was.md @@ -21,8 +21,23 @@ Qualys WAS is a cloud-based service that provides automated crawling and testing ## Configure Qualys WAS in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Qualys API Server**. Enter the [Qualys API server URL](https://docs.qualys.com/en/edr/api/#t=getting_started%2Fapi_conventions.htm). + +* **Username**. Enter the username of a Qualys WAS admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Qualys WAS configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/qualys.md b/docs/platform-services/automation-service/app-central/integrations/qualys.md index 09177470ff..2b60274583 100644 --- a/docs/platform-services/automation-service/app-central/integrations/qualys.md +++ b/docs/platform-services/automation-service/app-central/integrations/qualys.md @@ -47,8 +47,25 @@ Launch and manage scans and utilize Qualys scan data to enrich incident artifact ## Configure Qualys in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Qualys API Server**. Enter your [Qualys API server URL](https://docs.qualys.com/en/edr/api/#t=getting_started%2Fapi_conventions.htm), for example, `https://qualysapi.qg2.apps.qualys.eu/`. + +* **Username**. Enter the username of a Qualys admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **API X-Requested-With**. Enter the "X-Requested-With" header to use with [authentication](https://docs.qualys.com/en/vm/api/scanauth/get_started/authentication.htm). +* +* +* +* Qualys configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/rapid-7-insightvm.md b/docs/platform-services/automation-service/app-central/integrations/rapid-7-insightvm.md index 3910773329..a98a851d1c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/rapid-7-insightvm.md +++ b/docs/platform-services/automation-service/app-central/integrations/rapid-7-insightvm.md @@ -35,8 +35,25 @@ Vulnerability Management ## Configure Rapid7 InsightVM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Rapid7 InsightVM URL, for example, `your-domain.rapid7.com`. + +* **Port**. Enter your Rapid7 InsightVM [port](https://docs.rapid7.com/insightvm/insightvm-quick-start-guide/#ports). + +* **Username**. Enter the username of a Rapid7 InsightVM admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Rapid7 InsightVM configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/rapid7-nexpose.md b/docs/platform-services/automation-service/app-central/integrations/rapid7-nexpose.md index 2f513986bf..7502509848 100644 --- a/docs/platform-services/automation-service/app-central/integrations/rapid7-nexpose.md +++ b/docs/platform-services/automation-service/app-central/integrations/rapid7-nexpose.md @@ -29,8 +29,24 @@ Utilize and interact with Rapid7 Nexpose scan data during incident investigation ## Configure Rapid7 Nexpose in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Rapid7 Nexpose URL, for example, `your-domain.rapid7.com`. + +* **Port**. Enter your Rapid7 Nexpose [port](https://docs.rapid7.com/nexpose/nexpose-quick-start-guide/#ports). + +* **Username**. Enter the username of a Rapid7 Nexpose admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* Rapid7 Nexpose configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/rapidapi.md b/docs/platform-services/automation-service/app-central/integrations/rapidapi.md index d629bb8904..33f3635f5e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/rapidapi.md +++ b/docs/platform-services/automation-service/app-central/integrations/rapidapi.md @@ -21,8 +21,25 @@ RapidAPI is an API Hub that enables developers and enterprises to find, connect ## Configure RapidAPI in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **RapidAPI Host**. Enter your RapidAPI host (corresponding to the [X-RapidAPI-Host header](https://docs.rapidapi.com/v1.0/docs/configuring-api-authentication)). + +* **RapidAPI Key**. Enter your [RapidAPI key](https://docs.rapidapi.com/docs/keys-and-key-rotation). + +* **Querystring**. Enter a [RapidApI query string](https://docs.rapidapi.com/docs/configuring-api-security#query-string-parameter-authorization). + +* **RapidAPI URL**. Enter your [RapidAPI URL](https://docs.rapidapi.com/v1.0/docs/base-urls). +* +* +* +* RapidAPI configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/recorded-future.md b/docs/platform-services/automation-service/app-central/integrations/recorded-future.md index 3fb6cb2c94..b6b9ccfb89 100644 --- a/docs/platform-services/automation-service/app-central/integrations/recorded-future.md +++ b/docs/platform-services/automation-service/app-central/integrations/recorded-future.md @@ -39,8 +39,21 @@ Utilize Recorded Future threat intelligence feeds during incident investigation. ## Configure Recorded Future in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Recorded Future API](https://support.recordedfuture.com/hc/en-us/articles/9907011719699-Recorded-Future-Sandbox-API-Overview) URL, for example, `https://api.recordedfuture.com/` + +* **API Key**. Enter your [Recorded Future API key](https://support.recordedfuture.com/hc/en-us/articles/11305261649555-Recorded-Future-Sandbox-Obtaining-an-API-Access-key). +* +* +* +* Recorded Future configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness-logs.md b/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness-logs.md index 30fbec79b4..13fcd9011a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness-logs.md +++ b/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness-logs.md @@ -19,12 +19,29 @@ Query RSA NetWitness Incidents, Events, and Logs. ## Configure RSA NetWitness Logs in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [NetWitness host](https://community.netwitness.com/s/article/HostsandServicesSetUpProcedures). + +* **Port**. Enter your [NetWitness port](https://community.netwitness.com/s/article/HostsandServicesSetUpProcedures). + +* **Username**. Enter the username of a NetWitness admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* RSA NetWitness Logs configuration -For information about NetWitness Logs, see the [NetWitness Logs website](https://www.netwitness.com/products/log-management-monitoring/). +For information about NetWitness, see the [NetWitness documentation](https://community.netwitness.com/s/netwitness-platform-documentation). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness.md b/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness.md index fd9fc0d9c0..9e66b1f0fe 100644 --- a/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness.md +++ b/docs/platform-services/automation-service/app-central/integrations/rsa-netwitness.md @@ -22,12 +22,29 @@ Query RSA NetWitness Incidents, Events. ## Configure RSA Netwitness in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [NetWitness host](https://community.netwitness.com/s/article/HostsandServicesSetUpProcedures). + +* **Port**. Enter your [NetWitness port](https://community.netwitness.com/s/article/HostsandServicesSetUpProcedures). + +* **Username**. Enter the username of a NetWitness admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Incident ID**. Enter a Netwitness [incident ID](https://community.netwitness.com/s/article/IncidentsListView). +* +* RSA Netwitness configuration -For information about Netwitness, see the [Netwitness website](https://www.netwitness.com/). +For information about Netwitness, see the [NetWitness documentation](https://community.netwitness.com/s/netwitness-platform-documentation). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/sailpoint.md b/docs/platform-services/automation-service/app-central/integrations/sailpoint.md index b6683b3fdb..9c12a5c667 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sailpoint.md +++ b/docs/platform-services/automation-service/app-central/integrations/sailpoint.md @@ -39,10 +39,25 @@ SailPoint is an identity management solution that helps organizations manage emp ## Configure SailPoint in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [SailPoint hostname](https://documentation.sailpoint.com/identityiq/help/systemadmin/monenvhosttab.html). -In the Client ID and Client Secret fields, insert the previously copied client ID and secret respectively.
Sailpoint configuration +* **Client ID**. Enter the [client ID](https://documentation.sailpoint.com/saas/help/common/api_keys.html) you [copied previously](#sailpoint-configuration). + +* **Client Secret**. Enter the secret associated with the client ID. +* +* +* +* + +Sailpoint configuration For information about SailPoint, see [SailPoint documentation](https://documentation.sailpoint.com/). diff --git a/docs/platform-services/automation-service/app-central/integrations/salesforce.md b/docs/platform-services/automation-service/app-central/integrations/salesforce.md index 9eaa16e23e..e68d091e9b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/salesforce.md +++ b/docs/platform-services/automation-service/app-central/integrations/salesforce.md @@ -26,8 +26,27 @@ Query data and utilize actions in Salesforce. ## Configure Salesforce in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Salesforce [host URL](https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_rest_resources.htm), for example, `https://login.salesforce.com/`. + +* **Client ID**. Enter a Salesforce [client ID](https://help.salesforce.com/s/articleView?id=cc.b2c_generate_api_client_id.htm&type=5). + +* **Client Secret**. Enter the secret corresponding to the client ID. + +* **User Email**. Enter the email used for login by a [Salesforce admin user](https://help.salesforce.com/s/articleView?id=platform.integration_user.htm&type=5). This email will provide authentication for the integration. + +* **Password**. Enter the password of the admin user. +* +* +* +* Salesforce configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/screenshot-machine.md b/docs/platform-services/automation-service/app-central/integrations/screenshot-machine.md index 3e0fbc8fca..96f16700d6 100644 --- a/docs/platform-services/automation-service/app-central/integrations/screenshot-machine.md +++ b/docs/platform-services/automation-service/app-central/integrations/screenshot-machine.md @@ -19,12 +19,33 @@ Utilize Screenshot Machine to create screenshots of suspicious webpages as evide ## Configure Screenshot Machine in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your Screenshot Machine API [URL](https://www.screenshotmachine.com/website-screenshot-api.php), for example, `https://api.screenshotmachine.com`. + +* **API Key**. Enter your Screenshot Machine API key. + +* **Secret Phrase**. Enter your Screenshot Machine secret phrase. This is required if a secret phrase was set in your Screenshot Machine account settings. +* +* +* +* +* +* +* Screenshot Machine configuration -For information about Screenshot Machine, see [Screenshot Machine documentation](https://www.screenshotmachine.com/). +For information about Screenshot Machine, see [Screenshot Machine documentation](https://www.screenshotmachine.com/website-screenshot-api.php). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/security-scorecard.md b/docs/platform-services/automation-service/app-central/integrations/security-scorecard.md index 557b2f1917..2aa5101535 100644 --- a/docs/platform-services/automation-service/app-central/integrations/security-scorecard.md +++ b/docs/platform-services/automation-service/app-central/integrations/security-scorecard.md @@ -53,8 +53,23 @@ Create, update, and delete portfolios as well as gather enrichment data on all c ## Configure Security Scorecard in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Security Scorecard [API URL](https://securityscorecard.readme.io/docs/getting-started), for example, `https://api.securityscorecard.io`. + +* **API Key**. Enter your Security Scorecard [API key](https://securityscorecard.readme.io/docs/getting-started). + +* **Username**. Enter the username of a Security Scorecard admin user authorized to authenticate the integration. +* +* +* +* Security Scorecard configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/securitytrails.md b/docs/platform-services/automation-service/app-central/integrations/securitytrails.md index b08e2e7b08..868035f7e4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/securitytrails.md +++ b/docs/platform-services/automation-service/app-central/integrations/securitytrails.md @@ -18,12 +18,23 @@ SecurityTrails is a total inventory that curates comprehensive domain and IP add ## Configure SecurityTrails in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **Label**. The desired name for the resource. - * **URL**. The SecurityTrails API URL. Default: `https://api.securitytrails.com`. - * **API Key**. Your SecurityTrails API Key.
SecurityTrails configuration +* +* **URL**. Enter your SecurityTrails [API URL](https://docs.securitytrails.com/docs/overview#accessing-the-securitytrails-rest-api). The default is `https://api.securitytrails.com`. + +* **API Key**. Enter your SecurityTrails [API key](https://docs.securitytrails.com/docs/authentication). +* +* +* +* + +SecurityTrails configuration For information about SecurityTrails, see [SecurityTrails documentation](https://docs.securitytrails.com/docs/overview). diff --git a/docs/platform-services/automation-service/app-central/integrations/securonix-v2.md b/docs/platform-services/automation-service/app-central/integrations/securonix-v2.md index 4e8864040e..2764486ddf 100644 --- a/docs/platform-services/automation-service/app-central/integrations/securonix-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/securonix-v2.md @@ -23,8 +23,27 @@ Query event/alert data and user details from Securonix. ## Configure Securonix V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Securonix [server URL](https://documentation.securonix.com/bundle/securonix-cloud-user-guide/page/content/settings-application-settings.htm), for example, `https://10.0.0.21:8443`. + +* **Username**. Enter the username of a Securonix admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Tenant**. Enter your Securonix [tenant name](https://documentation.securonix.com/bundle/securonix-cloud-user-guide/page/content/settings-hadoop-tenant-details.htm). + +* **Timezone**. Select your timezone. +* +* +* +* Securonix V2 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/securonix.md b/docs/platform-services/automation-service/app-central/integrations/securonix.md index eb43a938f1..ead44845ec 100644 --- a/docs/platform-services/automation-service/app-central/integrations/securonix.md +++ b/docs/platform-services/automation-service/app-central/integrations/securonix.md @@ -24,8 +24,27 @@ Query event/alert data and user details from Securonix. ## Configure Securonix in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Securonix [server URL](https://documentation.securonix.com/bundle/securonix-cloud-user-guide/page/content/settings-application-settings.htm), for example, `https://10.0.0.21:8443`. + +* **Username**. Enter the username of a Securonix admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Tenant**. Enter your Securonix [tenant name](https://documentation.securonix.com/bundle/securonix-cloud-user-guide/page/content/settings-hadoop-tenant-details.htm). + +* **Timezone**. Select your timezone. +* +* +* +* Securonix configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/sentinelone.md b/docs/platform-services/automation-service/app-central/integrations/sentinelone.md index 576051b26d..e7605d1f25 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sentinelone.md +++ b/docs/platform-services/automation-service/app-central/integrations/sentinelone.md @@ -38,8 +38,21 @@ XDR ## Configure SentinelOne in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your SentinelOne API URL, for example, `https://.sentinelone.net`. + +* **Token**. Enter your SentinelOne token. +* +* +* +* SentinelOne configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/servicenow-v2.md b/docs/platform-services/automation-service/app-central/integrations/servicenow-v2.md index 5b4d0dcd81..852d83dc97 100644 --- a/docs/platform-services/automation-service/app-central/integrations/servicenow-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/servicenow-v2.md @@ -23,12 +23,25 @@ ServiceNow V2 SaaS is for technical management support - create, update, and gat ## Configure ServiceNow V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your ServiceNow URL in the format `https://company.service-now.com/`. - * **URL**. ServiceNow URL in the format `https://company.service-now.com/`. - * **Username**. Your ServiceNow username. - * **Password**. Your ServiceNow password.
ServiceNow V2 configuration +* **Username**. Enter the username of a ServiceNow admin user authorized to provide authentication for the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +ServiceNow V2 configuration For information about ServiceNow, see [ServiceNow documentation](https://www.servicenow.com/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/shodan.md b/docs/platform-services/automation-service/app-central/integrations/shodan.md index 7c1bd2f7d5..08919f0406 100644 --- a/docs/platform-services/automation-service/app-central/integrations/shodan.md +++ b/docs/platform-services/automation-service/app-central/integrations/shodan.md @@ -19,8 +19,21 @@ Shodan is a search engine for Internet-connected devices. Web search engines, su ## Configure Shodan in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Shodan API URL](https://developer.shodan.io/api), for example, `https://api.shodan.io`. + +* **API Key**. Enter your [Shodan API key](https://developer.shodan.io/api/requirements). +* +* +* +* Shodan configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/silent-push.md b/docs/platform-services/automation-service/app-central/integrations/silent-push.md index 43baafec69..e0d20cde41 100644 --- a/docs/platform-services/automation-service/app-central/integrations/silent-push.md +++ b/docs/platform-services/automation-service/app-central/integrations/silent-push.md @@ -27,8 +27,21 @@ The Silent Push integration identifies emerging threats before they launch by de ## Configure Silent Push in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Silent Push API URL](https://docs.silentpush.com/), for example, `https://api.silentpush.com`. + +* **API Key**. Enter your [Silent Push API key](https://help.silentpush.com/v1/docs/generating-an-api-key). +* +* +* +* Silent Push configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/slack.md b/docs/platform-services/automation-service/app-central/integrations/slack.md index 0327871ce1..941c85eaae 100644 --- a/docs/platform-services/automation-service/app-central/integrations/slack.md +++ b/docs/platform-services/automation-service/app-central/integrations/slack.md @@ -95,15 +95,33 @@ Create a public or private channel, Send messages or Files to channels or Users ## Configure Slack in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Bot/User OAuth Token**. Copy the User OAuth Token from the Slack web page (see [above](#slack-configuration)) and paste it here. For information about tokens, see [Slack documentation](https://api.slack.com/concepts/token-types). -* Copy the User OAuth Token from Slack webpage and paste it In the Bot/User OAuth Token. -* If using an Org-level Token, select the Token Type as Org-level Token and provide the Team ID. By default, it is set to Workspace-Level Token, which does not require a Team ID.
slack +* **Token Type**. Select the token type: + * **Org-level Token**. If using an org-level token, select the token type as **Org-level Token** and provide the team ID below. + * **Workspace-level Token**. By default, token type is set to **Workspace-level Token**, which does not require a team ID. + +* **Team ID**. If using an org-level token, provide the [team ID](https://slack.com/help/articles/221769328-Locate-your-Slack-URL-or-ID). +* +* +* +* + +slack Create another resource for the Bot User. Then: -* Copy the Bot User OAuth Token from Slack webpage and paste it In the Bot/User OAuth Token. -* If using an Org-level Token, select the Token Type as Org-level Token and provide the Team ID. By default, it is set to Workspace-Level Token, which does not require a Team ID.
slack +1. Copy the [Bot OAuth Token](https://api.slack.com/concepts/token-types#bot) from Slack webpage (see [above](#slack-configuration)) and paste it In the **Bot/User OAuth Token** field. +1. If using an org-level token, select the **Token Type** as **Org-level Token** and provide the team ID. By default, it is set to **Workspace-Level Token**, which does not require a team ID. + +slack For information about Slack, see [Slack documentation](https://slack.com/help). diff --git a/docs/platform-services/automation-service/app-central/integrations/smtp-v3.md b/docs/platform-services/automation-service/app-central/integrations/smtp-v3.md index 111120e5c0..75ef16d225 100644 --- a/docs/platform-services/automation-service/app-central/integrations/smtp-v3.md +++ b/docs/platform-services/automation-service/app-central/integrations/smtp-v3.md @@ -39,8 +39,42 @@ Email Gateway ## Configure SMTP V3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **Email Account**. Enter an SMTP email account address. + +* **SMTP Server**. Enter your SMTP server, for example, `smtp.office365.com`. + +* **Port**. Enter your SMTP port, for example, `587`. + +* +* **Connection Security**. Select the security method for your connection: + * **None** + * **STARTTLS** + * **SSL/TLS** + +* **Authentication Method**. Select the authentication method: + * **None** + * **Plain password** + * **Encrypted password** + +* **Username**. Enter the username for an SMTP admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* +* SMTP V3 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/snort.md b/docs/platform-services/automation-service/app-central/integrations/snort.md index 27eca1469f..dfff357a5a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/snort.md +++ b/docs/platform-services/automation-service/app-central/integrations/snort.md @@ -18,10 +18,21 @@ The Snort is a free open source network intrusion detection system and intrusion ## Configure Snort in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; - - * **URL**. 'https://www.snort.org'.
Snort configuration +* +* **URL**. Enter your Snort URL, for example, `https://www.snort.org`. +* +* +* +* + +Snort configuration For information about Snort, see [Snort documentation](https://www.snort.org/documents). diff --git a/docs/platform-services/automation-service/app-central/integrations/snyk.md b/docs/platform-services/automation-service/app-central/integrations/snyk.md index 28315f0492..556a6e5a22 100644 --- a/docs/platform-services/automation-service/app-central/integrations/snyk.md +++ b/docs/platform-services/automation-service/app-central/integrations/snyk.md @@ -21,11 +21,23 @@ The Snyk is a platform allowing you to scan, prioritize, and fix security vulner ## Configure Snyk in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Snyk API URL](https://docs.snyk.io/snyk-api/v1-api#api-urls). The default is `https://api.snyk.io/`. - * **API URL**. Default is `https://api.snyk.io/`. - * **Token**. Insert the Token.
Snyk configuration +* **Token**. Insert your [Snyk API token](https://docs.snyk.io/snyk-api/authentication-for-api#how-to-obtain-your-personal-token). +* +* +* +* + +Snyk configuration For information about Snyk, see [Snyk documentation](https://docs.snyk.io/). diff --git a/docs/platform-services/automation-service/app-central/integrations/socradar.md b/docs/platform-services/automation-service/app-central/integrations/socradar.md index 661626d607..40ab891847 100644 --- a/docs/platform-services/automation-service/app-central/integrations/socradar.md +++ b/docs/platform-services/automation-service/app-central/integrations/socradar.md @@ -20,8 +20,23 @@ SOCRadar provides an early warning system with an extended threat intelligence p ## Configure SOCRadar in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your SOCRadar hostname. + +* **API Key**. Enter your [SOCRadar API key](https://github.com/demisto/content/blob/master//Packs/SOCRadar/Integrations/SOCRadarIncidents/README.md#how-to-obtain-socradar-incident-api-key). + +* **Company ID**. Enter your [SOCRadar company ID](https://github.com/demisto/content/blob/master//Packs/SOCRadar/Integrations/SOCRadarIncidents/README.md). +* +* +* +* SOCRadar configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/sonicwall.md b/docs/platform-services/automation-service/app-central/integrations/sonicwall.md index 2f11bdbfde..85ed2872fd 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sonicwall.md +++ b/docs/platform-services/automation-service/app-central/integrations/sonicwall.md @@ -32,8 +32,23 @@ For configuration purposes, refer [here](https://www.sonicwall.com/support/techn ## Configure SonicWall in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your SonicWall API URL, for example, `https://your-domain/api/sonicos`. + +* **Username**. Enter the username of a SonicWall admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* SonicWall configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/sophos-central-v3.md b/docs/platform-services/automation-service/app-central/integrations/sophos-central-v3.md index 48b10f0697..37f349ea5e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sophos-central-v3.md +++ b/docs/platform-services/automation-service/app-central/integrations/sophos-central-v3.md @@ -22,7 +22,7 @@ Utilize Sophos Central enrichment data during incident investigations. ## Sophos Central V3 configuration -The following steps show how to create new API credentials to work with Cloud SOAR. +The following steps show how to create new [API credentials](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/APICredentials/index.html) to work with Cloud SOAR. 1. Log in to the [Sophos Central Partner](https://central.sophos.com/manage/partner) platform. 1. On the left click on **Settings & Policies** and then click the **API credentials**.
sophos-central @@ -35,12 +35,25 @@ The following steps show how to create new API credentials to work with Cloud SO ## Configure Sophos Central V3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your[ Sophos API URL](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/APICredentials/ThirdPartyAccess/index.html), for example, `https://api.central.sophos.com`. - * **Label**. The name of the resource. - * **URL**. `https://api.central.sophos.com`. - * Client ID and Client Secret taken earlier from Sophos.
Sophos Central V3 configuration +* **Client ID**. Enter the [client ID](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/APICredentials/index.html) you [obtained earlier](#sophos-central-v3-configuration). + +* **Client Secret**. Enter the secret for the client ID. +* +* +* +* + +Sophos Central V3 configuration For information about Sophos Central, see [Sophos Central documentation](https://docs.sophos.com/central/customer/help/en-us/index.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/sophos-central.md b/docs/platform-services/automation-service/app-central/integrations/sophos-central.md index 53ab1d14b2..ae9698fd4d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sophos-central.md +++ b/docs/platform-services/automation-service/app-central/integrations/sophos-central.md @@ -24,8 +24,23 @@ Utilize Sophos Central enrichment data during incident investigations. ## Configure Sophos Central in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your[ Sophos API URL](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/APICredentials/ThirdPartyAccess/index.html), for example, `https://api.central.sophos.com`. + +* **API Key**. Enter your [legacy Sophos Central API key](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/ApiTokenManagement/index.html). + +* **Token**. Enter your [Sophos Central token](https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/ApiTokenManagement/index.html). +* +* +* +* Sophos Central configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/spiderfoot-hx.md b/docs/platform-services/automation-service/app-central/integrations/spiderfoot-hx.md index 1e1cbb2e5b..9198f8f88c 100644 --- a/docs/platform-services/automation-service/app-central/integrations/spiderfoot-hx.md +++ b/docs/platform-services/automation-service/app-central/integrations/spiderfoot-hx.md @@ -58,12 +58,23 @@ Log in to SpiderFoot, select your username from the menu, choose API Key and cop ## Configure SpiderFoot HX in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your SpiderFoot URL. - * **Label**. The desired name for the resource. - * **URL**. Your SpiderFoot URL. - * **API Key**. Your SpiderFoot API Key you copied earlier from SpiderFoot.
Spiderfoot configuration +* **API Key**. Enter the SpiderFoot API key you [copied earlier](#spiderfoot-hx-configuration). +* +* +* +* + +Spiderfoot configuration For information about SpiderFoot, see [SpiderFoot documentation](https://github.com/smicallef/spiderfoot/blob/master/README.md). diff --git a/docs/platform-services/automation-service/app-central/integrations/splunk.md b/docs/platform-services/automation-service/app-central/integrations/splunk.md index 087d3583ca..e5474e558f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/splunk.md +++ b/docs/platform-services/automation-service/app-central/integrations/splunk.md @@ -28,8 +28,37 @@ To use any custom fields from Splunk within Cloud SOAR, make sure they are added ## Configure Splunk in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Protocol**. Enter your protocol: + * **HTTP** + * **HTTPS** + +* **Splunk Host**. Enter the [hostname of your Splunk instance](https://help.splunk.com/en/splunk-enterprise/get-started/get-data-in/9.3/configure-host-values/set-a-default-host-for-a-splunk-platform-instance). + +* **Splunk API Port**. Enter your [Splunk API port](https://docs.splunk.com/Documentation/SplunkCloud/latest/RESTTUT/RESTandCloud), for example,`8089`. + +* **Authentication Type**. Select the authentication type: + * **Username and Password (Basic Authentication)** + * **Bearer Token (Authentication Token)** + +* **Token**. Enter your [Splunk token](https://dev.splunk.com/observability/docs/apibasics/authentication_basics#Obtain-tokens). Required only if you selected **Bearer Token (Authentication Token)**. + +* **Splunk Username**. Enter the username of a Splunk admin user authorized to authenticate the integration. Required only if you selected **Username and Password (Basic Authentication)** + +* **Splunk Password**. Enter the password for the Splunk user. Required only if you selected **Username and Password (Basic Authentication)** + +* **Splunk Timezone (Daemon)**. Select your timezone. +* +* +* +* Splunk configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/stellar-cyber-starlight.md b/docs/platform-services/automation-service/app-central/integrations/stellar-cyber-starlight.md index 71232fec43..9b2b9b657f 100644 --- a/docs/platform-services/automation-service/app-central/integrations/stellar-cyber-starlight.md +++ b/docs/platform-services/automation-service/app-central/integrations/stellar-cyber-starlight.md @@ -18,8 +18,26 @@ Query Starlight events during active incident investigations with Cloud SOAR teg ## Configure Stellar Cyber Starlight in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **IP/Hostname**. Enter your Stellar Cyber Starlight host address. + +* **Port**. Enter your Stellar Cyber Starlight [port](https://docs.stellarcyber.ai/prod-docs/5.1.x/Configure/Ports/Firewall-Ports-for-Parsers.htm). + +* **Index**. Enter your Stellar Cyber Starlight [index](https://docs.stellarcyber.ai/5.1.1/Common/Understanding-Indices.htm). + +* **Username**. Enter the username of a Stellar Cyber Starlight admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* Stellar Cyber Starlight configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-automation-tools.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-automation-tools.md index 4a0f1ab866..c6437700c4 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-automation-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-automation-tools.md @@ -438,7 +438,24 @@ OUTPUT = { ## Configure Sumo Logic Automation Tools in Automation Service and Cloud SOAR -No configuration is needed. Sumo Logic Automation Tools executes without additional authentication. +import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; + + + +* +* +* + +:::note +No authentication configuration is needed. Sumo Logic Automation Tools executes without additional authentication. +::: + +Sumo Logic Automation Tools configuration ## Change log diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-cloud-siem.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-cloud-siem.md index 3d15c5d164..991f394336 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-cloud-siem.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-cloud-siem.md @@ -58,14 +58,37 @@ The ID and key won't be available again once you close the confirmation screen. ## Configure Sumo Logic Cloud SIEM in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* **Sumo Logic Cloud SIEM URL**. URL to the Cloud SIEM instance (for example, `https://service.sumologic.com/sec`). +* +* +* +* +* **Signals Daemon Query**. Enter the query to be executed in daemons. - * **Label**. The name of the resource. - * **Sumo Logic API URL**. URL to the API of the Cloud SIEM instance (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * **Sumo Logic Cloud SIEM URL**. URL to the Cloud SIEM instance (for example, `https://service.sumologic.com/sec`). - * **Access ID**. The access ID that you copied earlier. - * **Access Key**. The access key that you copied earlier.
Sumo Logic Cloud SIEM configuration +* **API Rate Limit Sleep (s)**. Enter the API rate limit in seconds. If the API rate limit exceeded, wait for 1 second and then attempt a retry, with a maximum wait time of 10. more info at https://help.sumologic.com/docs/api/metrics/#rate-limiting. + +* **Custom Field Interval Name (Close Insight Trigger)**. This field is only used within the Close Insight Trigger as a custom field for insight ID in Cloud SOAR, for example, `opt_1`. + +* **Resolution Status**. This field is only used within the Close Insight Trigger as a resolution reason for closing the insight, for example, `Resolved`. + +* **Closure Comments (Close Insight Trigger)**. This field is only used within the Close Insight Trigger as a closure comment for insight. +* +* + +Sumo Logic Cloud SIEM configuration For detailed API documentation, see [Sumo Logic APIs](/docs/api/). diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-log-analytics.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-log-analytics.md index e6929c4670..51d0651b3a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-log-analytics.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-log-analytics.md @@ -32,13 +32,31 @@ The ID and key won't be available again once you close the confirmation screen. ## Configure Sumo Logic Log Analytics in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* **Timezone**. Select your timezone. - * **Label**. The name of the resource. - * **Sumo Logic API URL**. URL to the API of the instance (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * **Access ID**. The access ID that you copied earlier. - * **Access Key**. The access key that you copied earlier.
Sailpoint configuration +* **Daemon Query**. Enter the query to be executed in daemons. +* +* +* **API Rate Limit Sleep (s)**. Enter the API rate limit in seconds. If the API rate limit exceeded, wait for 1 second and then attempt a retry, with a maximum wait time of 10. more info at https://help.sumologic.com/docs/api/metrics/#rate-limiting. +* +* + +Sailpoint configuration ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail.md index 68b3f914ac..0a67c64316 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail.md @@ -72,16 +72,32 @@ Integration with Sumo Logic platform for monitors and Gmail notification. ## Configure Sumo Logic Notifications By Gmail in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* **Client ID (Gmail)**. Enter the Gmail client ID you [copied earlier](#sumo-logic-notifications-by-gmail-configuration). - * **Label**. The name of the resource. - * **Sumo Logic API URL**. URL to the API of the instance (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * **Access ID (Sumologic)**. The access ID that you copied earlier. - * **Access Key (Sumologic)**. The access key that you copied earlier. - * **Client ID (Gmail)**. To set up the Client ID, please refer to step 6 . - * **Client Secret Key (Gmail)**. To set up the Client Secret Key, please refer to step 6. - * **Credentials(Gmail)**. Retrieve Credentials from the "Confirm DO NOT USE IN PLAYBOOK" Action
sumo-logic-notifications +* **Client Secret Key (Gmail)**. Enter the secret for the client ID. + +* **Credentials**. Retrieve credentials from the "Confirm DO NOT USE IN PLAYBOOK" action. +* +* +* +* + +sumo-logic-notifications ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft.md index b9831569cd..487d9d42f3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft.md @@ -109,14 +109,42 @@ Microsoft Graph (7) ## Configure Sumo Logic Notifications by Microsoft in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your API URL for Microsoft, for example, `https://graph.microsoft.com/v1.0`. - * For the first **API URL** field, provide the Microsoft Graph API URL. - * Specify the **Authentication Grant Type** and **Directory (Tenant) ID**. - * For **Client ID** and **Client Secret**, provide the Microsoft Graph client ID and secret obtained as described in [Add a client secret](#add-a-client-secret). - * Provide the **Sumo Logic API URL** (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * Enter the **Access ID** and **Access Key** from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys.
Sumo Logic Notifications by Microsoft configuration +* **Authentication Grant Type**. Choose one of the following according to the permissions you add to your app: + * **Password (Delegated Context)** + * **Client Credentials (Application Context)** + +* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). + +* **Client ID**. Enter your application ID. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). This is required for both authentication grant types. + +* **Client Secret**. Enter your client secret. This is required for both authentication grant types. + +* **Username**. Enter the username of an admin user authorized to authenticate the integration. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. + +* **Password**. Enter the password for the admin user. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**. +* +* +* +* +* +* +* + +Sumo Logic Notifications by Microsoft configuration ## Change Log * December 04, 2024 - First upload \ No newline at end of file diff --git a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications.md b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications.md index bc9a0ea0e1..e12cb49804 100644 --- a/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications.md +++ b/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications.md @@ -27,14 +27,34 @@ The ID and key won't be available again once you close the confirmation screen. ## Configure Sumo Logic Notifications in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* **Slack Bot/User OAuth Token**. Enter the Bot or User OAuth token from Slack. (The authentication token bears the required scopes.) For information about tokens, see [Slack documentation](https://api.slack.com/concepts/token-types). + +* +* +* +* - * **Label**. The name of the resource. * **Sumo Logic API URL**. URL to the API of the instance (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. * **Access ID**. The access ID that you copied earlier. * **Access Key**. The access key that you copied earlier. - * **Slack Bot/User OAuth Token**. To set up the Slack app, refer to [Slack configuration](/docs/platform-services/automation-service/app-central/integrations/slack/) within App Central. You'll require a Slack Bot/User OAuth Token.
Sumo Logic Notifications configuration + * **Slack Bot/User OAuth Token**. To set up the Slack app, refer to [Slack configuration](/docs/platform-services/automation-service/app-central/integrations/slack/) within App Central. You'll require a Slack Bot/User OAuth Token. + +Sumo Logic Notifications configuration ## Change Log * September 22, 2023 - First upload diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-deepsight.md b/docs/platform-services/automation-service/app-central/integrations/symantec-deepsight.md index 02fc925e65..ab85646d0d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-deepsight.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-deepsight.md @@ -22,8 +22,20 @@ Gather threat intelligence data from Symantec DeepSight for incident investigati ## Configure Symantec DeepSight in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Key**. Enter your Symantec DeepSight API key. + +* +* +* +* Symantec DeepSight configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-edr.md b/docs/platform-services/automation-service/app-central/integrations/symantec-edr.md index d25ac9d9da..d233f89670 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-edr.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-edr.md @@ -21,8 +21,23 @@ Symantec EDR detects and exposes suspicious network activity, alerts to potentia ## Configure Symantec EDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [Symantec EDR host address](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Dialog-Overview/cs-help-console-lu-settings-policy-v25075140-d79e5424/ip-address-or-host-name-v23251765-d79e6255.html). + +* **API Client ID**. Enter your [Symantec EDR client ID](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-detection-and-response/4-11/Settings/generating-an-oauth-client-v118551314-d38e48694.html). + +* **API Client Secret**. Enter the secret for the client ID. +* +* +* +* Symantec EDR configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection-cloud.md b/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection-cloud.md index 95c1a0441b..93d80e4ecf 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection-cloud.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection-cloud.md @@ -23,12 +23,27 @@ Gather system information and event details from Symantec Endpoint Protection Cl ## Configure Symantec Endpoint Protection Cloud in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Client ID**. Enter your Symantec Endpoint Protection Cloud [client ID](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-security/sescloud/Settings/creating-a-client-application-v132702110-d4152e4057.html). + +* **API Client Secret**. Enter the secret for the client ID. + +* **Customer ID**. Enter your Symantec Endpoint Protection Cloud [customer ID](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/getting-up-and-running-on-for-the-first-time-v45150512-d43e1033/symantec-endpoint-protection-quick-start-guide-v116381733-d25e6.html). + +* **Domain ID**. Enter your Symantec Endpoint Protection Cloud [domain](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/managing-groups-clients-and-administrators/about-domains-v15506400-d1e150.html) ID. +* +* Symantec Endpoint Protection Cloud configuration -For information about Symantec Endpoint Protection, see [Symantec Endpoint Protection documentation](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all.html). +For information about Symantec Endpoint Protection Cloud, see [Symantec Endpoint Protection documentation](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all.html). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection.md b/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection.md index 1b947686fc..fb7bf2b66e 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-endpoint-protection.md @@ -28,8 +28,27 @@ Work with Symantec Endpoint Protection groups and events and issue containment a ## Configure Symantec Endpoint Protection in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your Symantec Endpoint Protection [server URL](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Dialog-Overview/cs-admin-page-site-properties-lu-tab-is-in-updates-v126147594-d3e1314/site-properties-private-insight-server-v83833498-d3e1573.html). + +* **Port**. Enter your Symantec Endpoint Protection [port](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/getting-up-and-running-on-for-the-first-time-v45150512-d43e1033/communication-ports-for-symantec-endpoint-protecti-v7054802-d23e797.html). + +* **Username**. Enter the username for a Symantec Endpoint Protection admin user. + +* **Password**. Enter the password for the admin user. + +* **Domain**. Enter your Symantec Endpoint Protection [domain](https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/managing-groups-clients-and-administrators/about-domains-v15506400-d1e150.html) ID. +* +* +* +* Symantec Endpoint Protection configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-secure-web-gateway-bluecoat.md b/docs/platform-services/automation-service/app-central/integrations/symantec-secure-web-gateway-bluecoat.md index 59eedcc105..42959cef15 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-secure-web-gateway-bluecoat.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-secure-web-gateway-bluecoat.md @@ -20,8 +20,23 @@ Search SWG events and test URL access. ## Configure Symantec Secure Web Gateway (Bluecoat) in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter your Symantec Secure Web Gateway endpoint address. + +* **Username**. Enter the username for a Symantec Secure Web Gateway admin user. + +* **Password**. Enter the password for the admin user. +* +* +* +* Symantec Secure Web Gateway configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/symantec-webpulse.md b/docs/platform-services/automation-service/app-central/integrations/symantec-webpulse.md index 7957f63fe9..8e3d3383b3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/symantec-webpulse.md +++ b/docs/platform-services/automation-service/app-central/integrations/symantec-webpulse.md @@ -18,8 +18,20 @@ Submit URLs to Symantec WebPulse. ## Configure Symantec WebPulse in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Endpoint**. Enter your Symantec WebPulse endpoint address. + +* +* +* +* Symantec WebPulse configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/syslog-ng.md b/docs/platform-services/automation-service/app-central/integrations/syslog-ng.md index 285e793485..ecb7c46f71 100644 --- a/docs/platform-services/automation-service/app-central/integrations/syslog-ng.md +++ b/docs/platform-services/automation-service/app-central/integrations/syslog-ng.md @@ -23,8 +23,23 @@ Syslog-ng is a free and open-source implementation of the syslog protocol for Un ## Configure Syslog-NG in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Syslog-NG URL. + +* **Username**. Enter the username for a Syslog-NG admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Syslog-NG configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/telegram-v2.md b/docs/platform-services/automation-service/app-central/integrations/telegram-v2.md index 88c430837a..32708eee7b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/telegram-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/telegram-v2.md @@ -17,23 +17,35 @@ Send messages from Cloud SOAR integration with Telegram V2. ## Telegram V2 configuration -In Telegram application, create new bot sending a message /newbot to Botfather. Choose name and username for your bot. After crating your bot you will receive a message with your token to access the HTTP API. Keep your token secure and store it safely. +In Telegram application, create new [bot](https://core.telegram.org/bots) sending a message /newbot to Botfather. Choose name and username for your bot. After creating your bot you will receive a message with your token to access the HTTP API. Keep your token secure and store it safely. + +:::note +* The bot must be the administrator of the chat to send your message. +* The chat ID will be sent without writing it as a parameter in the Chat field if there are chat updates in 24 hours. Otherwise, it needs to send a message to the chat in the Telegram application to continue. Another possible way to obtain a chat ID is to follow these steps in the Telegram application: go on the group of choice, add @rose bot, type the command /id, and the chat ID will be sent. Use that value in the parameter for Chat. +::: ## Configure Telegram V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Telegram API URL, for example, `https://api.telegram.org/`. - * **URL**. The Telegram URL `https://api.telegram.org/`. - * **API Token**. the API Token you copied earlier when creating your bot.
Telegram V2 configuration +* **API Token**. Enter the API [token](https://core.telegram.org/bots/tutorial#obtain-your-bot-token) you [copied earlier](#telegram-v2-configuration) when creating your bot. +* +* +* +* -For information about Telegram, see the [Telegram website](https://telegram.org/). +Telegram V2 configuration -:::note -* The bot must be Administrator of the chat to send your message. -* The chat ID will be sent without writing it as parameter in Chat field if there are chat updates in 24 hours. Otherwise, needs to be send a message to the chat in Telegram application to continue. Other possible way to obtain chat ID is also from Telegram application following the steps: go on the group of choice, add @rose bot, type the command /id and chat ID will be sent. Use that value in parameter for Chat. -::: +For information about Telegram, see the [Telegram website](https://telegram.org/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/tenable.io.md b/docs/platform-services/automation-service/app-central/integrations/tenable.io.md index 9e7b56f53b..0563e646e8 100644 --- a/docs/platform-services/automation-service/app-central/integrations/tenable.io.md +++ b/docs/platform-services/automation-service/app-central/integrations/tenable.io.md @@ -34,8 +34,21 @@ Connect with Tenable.io to execute scans, get scan results and perform administr ## Configure Tenable.io in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Access Key**. Enter your Tenable [access key](https://docs.tenable.com/vulnerability-management/Content/Settings/my-account/GenerateAPIKey.htm). + +* **Secret Key**. Enter the secret for the access key. +* +* +* +* Tenable.io configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/tenable.sc.md b/docs/platform-services/automation-service/app-central/integrations/tenable.sc.md index 511281b5d1..0855cc835b 100644 --- a/docs/platform-services/automation-service/app-central/integrations/tenable.sc.md +++ b/docs/platform-services/automation-service/app-central/integrations/tenable.sc.md @@ -43,8 +43,29 @@ Connect with Tenable SecurityCenter to execute scans, get scan results and perfo ## Configure Tenable.sc in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [Tenable SC host address](https://docs.tenable.com/integrations/Atlassian/Jira/Content/introduction.htm#Data-Collection), for example, `tenablesc.eastus.cloudapp.azure.com`. + +* **Port**. Enter your Tenable SC [port](https://docs.tenable.com/tenable-core/security-center/Content/TenableCore/AccessRequirements.htm#Port-Requirements). + +* **Protocol**. Select the protocol: + * **HTTPS** + * **HTTP** + +* **Username**. Enter the username of a Tenable SC admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Tenable.sc configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/terraform.md b/docs/platform-services/automation-service/app-central/integrations/terraform.md index 6b870372d4..b0e65acd1d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/terraform.md +++ b/docs/platform-services/automation-service/app-central/integrations/terraform.md @@ -41,8 +41,21 @@ Terraform is an open-source infrastructure as code software tool that provides a ## Configure Terraform in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Terraform URL. + +* **Token**. Enter the [token](https://developer.hashicorp.com/terraform/enterprise/users-teams-organizations/users#creating-a-token) you [copied earlier](#terraform-configuration). +* +* +* +* Terraform configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/thehive.md b/docs/platform-services/automation-service/app-central/integrations/thehive.md index e82dd70a37..e481186788 100644 --- a/docs/platform-services/automation-service/app-central/integrations/thehive.md +++ b/docs/platform-services/automation-service/app-central/integrations/thehive.md @@ -46,14 +46,25 @@ This integration enables seamless interaction with TheHive platform, allowing ca ## Configure TheHive in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API Key**. Enter an [API key](https://docs.strangebee.com/cortex/api/api-guide/#authentication) used to authenticate API requests to TheHive. -* **API Key**. A unique token used to authenticate API requests to TheHive. -* **Server URL**. The base URL (hostname or IP address) of your TheHive server. -* **Port**. (Optional) The port number on which TheHive is accessible. -* **Organization Name**. (Optional) The name of the organization context in multi-tenant deployments of TheHive. -* **Automation Engine**. Select **Cloud execution** for this certified integration. Select a bridge option only for a custom integration. See [Cloud or Bridge execution](/docs/platform-services/automation-service/automation-service-integrations/#cloud-or-bridge-execution). +* **Server URL**. Enter the [base URL](https://docs.strangebee.com/thehive/configuration/service/#listen-address-port) (hostname or IP address) of your TheHive server. + +* **Port**. (Optional) Enter the [port number](https://docs.strangebee.com/thehive/configuration/service/#listen-address-port) on which TheHive is accessible. + +* **Organization Name**. (Optional) Enter the name of the [organization](https://docs.strangebee.com/thehive/administration/organizations/about-organizations/) context in multi-tenant deployments of TheHive. +* +* +* +* TheHive configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/threat-crowd.md b/docs/platform-services/automation-service/app-central/integrations/threat-crowd.md index ea3eda9c65..7a52ed7257 100644 --- a/docs/platform-services/automation-service/app-central/integrations/threat-crowd.md +++ b/docs/platform-services/automation-service/app-central/integrations/threat-crowd.md @@ -22,8 +22,20 @@ Search malicious indicators using Threat Crowd intelligence feeds. ## Configure Threat Crowd in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Threat Crowd URL. + +* +* +* +* Threat Crowd configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/threatconnect.md b/docs/platform-services/automation-service/app-central/integrations/threatconnect.md index d0dc4f410c..58c71fb8ab 100644 --- a/docs/platform-services/automation-service/app-central/integrations/threatconnect.md +++ b/docs/platform-services/automation-service/app-central/integrations/threatconnect.md @@ -19,8 +19,25 @@ Utilize ThreatConnect intelligence data during incident investigations. ## Configure ThreatConnect in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your ThreatConnect [server URL](https://docs.threatconnect.com/en/latest/rest_api/quick_start.html), for example, `https://api.threatconnect.com`. + +* **Access ID**. Enter a ThreatConnect [access ID](https://knowledge.threatconnect.com/docs/managing-user-accounts#creating-an-api-user). + +* **Secret Key**. Enter the secret for the access ID. + +* **Default owner**. Enter the default [owner](https://knowledge.threatconnect.com/docs/en/ownership-in-threatconnect). +* +* +* +* ThreatConnect configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/threatdown-oneview.md b/docs/platform-services/automation-service/app-central/integrations/threatdown-oneview.md index 12e21eee36..59a89574ed 100644 --- a/docs/platform-services/automation-service/app-central/integrations/threatdown-oneview.md +++ b/docs/platform-services/automation-service/app-central/integrations/threatdown-oneview.md @@ -60,13 +60,25 @@ Threat Intelligence Reputation ## Configure ThreatDown OneView in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your ThreatDown OneView site URL, for example, `https://api.malwarebytes.com`. - * **Label**. Add a name for the resource. - * **URL**. Enter your ThreatDown OneView site URL. - * **Client ID**. Enter your Client ID. - * **Client Secret**. Enter your Client Secret.
threatdown-oneview2 +* **Client ID**. Enter your ThreatDown OneView [client ID](https://support.threatdown.com/hc/en-us/articles/4413799441683-Create-OAuth2-credentials-for-OneView). + +* **Client Secret**. Enter the secret for your client ID. +* +* +* +* + +threatdown-oneview2 For information about ThreatDown OneView, see [ThreatDown OneView documentation](https://support.threatdown.com/hc/en-us/sections/4413802067603-Administration). diff --git a/docs/platform-services/automation-service/app-central/integrations/threatminer.md b/docs/platform-services/automation-service/app-central/integrations/threatminer.md index 73b600b904..ecbf01b669 100644 --- a/docs/platform-services/automation-service/app-central/integrations/threatminer.md +++ b/docs/platform-services/automation-service/app-central/integrations/threatminer.md @@ -23,8 +23,20 @@ Search DNS records for enrichment data with Cloud SOAR integration with ThreatMi ## Configure ThreatMiner in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your ThreatMiner [server URL](https://www.threatminer.org/api.php), for example, `https://api.threatminer.org/v2/`. + +* +* +* +* ThreatMiner configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/threatq.md b/docs/platform-services/automation-service/app-central/integrations/threatq.md index 0c98c96a91..0d5c161187 100644 --- a/docs/platform-services/automation-service/app-central/integrations/threatq.md +++ b/docs/platform-services/automation-service/app-central/integrations/threatq.md @@ -36,8 +36,25 @@ The ThreatQ threat intelligence platform, automates the aggregation, operational ## Configure ThreatQ in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [ThreatQ host address](https://docs.threatq.com/rest_api#section/Introduction). + +* **Username**. Enter the username of a ThreatQ admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. + +* **Client ID**. Enter a [ThreatQ client ID](https://docs.threatq.com/rest_api#tag/Authentication/operation/6dfefacb2109527235856b8df26618d5). +* +* +* +* ThreatQ configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/trend-micro-deep-security.md b/docs/platform-services/automation-service/app-central/integrations/trend-micro-deep-security.md index 56aa00132a..96d1c89a58 100644 --- a/docs/platform-services/automation-service/app-central/integrations/trend-micro-deep-security.md +++ b/docs/platform-services/automation-service/app-central/integrations/trend-micro-deep-security.md @@ -34,8 +34,23 @@ Utilize Trend Micro Deep Security to interact with IP lists, firewall and intrus ## Configure Trend Micro Deep Security in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Trend Micro Deep Security API URL](https://automation.deepsecurity.trendmicro.com/article/12_0/use-the-previous-rest-api/#basic-api-access). + +* **API Key**. Enter your Trend Micro Deep Security [API key](https://docs.trendmicro.com/en-us/documentation/article/deep-security-20-lts-api-key). + +* **API Version**. Enter your Trend Micro Deep Security [API version](https://automation.deepsecurity.trendmicro.com/article/20_0/first-steps-for-deep-security-developers/#api-versions). +* +* +* +* Trend Micro Deep Security configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/trend-micro-vision-one.md b/docs/platform-services/automation-service/app-central/integrations/trend-micro-vision-one.md index 1c0757532f..7114e094fd 100644 --- a/docs/platform-services/automation-service/app-central/integrations/trend-micro-vision-one.md +++ b/docs/platform-services/automation-service/app-central/integrations/trend-micro-vision-one.md @@ -26,8 +26,21 @@ The Trend Micro Vision One platform includes advanced XDR capabilities that coll ## Configure Trend Micro Vision One in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Trend Micro Vision One API URL](https://automation.trendmicro.com/xdr/Guides/Regional-domains/), for example, `https://api.xdr.trendmicro.com`. + +* **Token**. Enter your [Trend Micro Vision One token](https://docs.trendmicro.com/en-us/documentation/article/trend-vision-one-api-keys-third-party-apps). +* +* +* +* Trend Micro Vision One configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/triage-tools.md b/docs/platform-services/automation-service/app-central/integrations/triage-tools.md index f0acff1c28..c817358d6a 100644 --- a/docs/platform-services/automation-service/app-central/integrations/triage-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/triage-tools.md @@ -37,8 +37,25 @@ Internal ## Configure Triage Tools Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* +* +* +* +* +* +* * Set the **Cloud SOAR API URL** (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. * Provide the **Access ID** and **Access Key** from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys.
Triage Tools configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/tufin-securechange.md b/docs/platform-services/automation-service/app-central/integrations/tufin-securechange.md index 7aa54f8645..da9dfc76ec 100644 --- a/docs/platform-services/automation-service/app-central/integrations/tufin-securechange.md +++ b/docs/platform-services/automation-service/app-central/integrations/tufin-securechange.md @@ -20,13 +20,25 @@ The Tufin SecureChange platform helps you to automates the process of changing s ## Configure Tufin SecureChange in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Tufin SecureChange API URL](https://forum.tufin.com/support/kc/latest/Content/Suite/RESTAPI/4423.htm). - * **Label**. Name of the resource. - * **URL**. URL of Tufin SecureChange. - * **Username** - * **Password**
Tufin SecureChange configuration +* **Username**. Enter the username of a Tufin SecureChange admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +Tufin SecureChange configuration For information about Tufin SecureChange, see [Tufin SecureChange documentation](https://forum.tufin.com/support/kc/latest/Content/Suite/856.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/tufin-securetrack-v2.md b/docs/platform-services/automation-service/app-central/integrations/tufin-securetrack-v2.md index 882ab9b873..ef66bf85b0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/tufin-securetrack-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/tufin-securetrack-v2.md @@ -24,13 +24,25 @@ Tufin SecureTrack is a security policy management solution that provides visibil ## Configure Tufin SecureTrack V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Tufin SecureTrack API URL](https://forum.tufin.com/support/kc/latest/Content/Suite/RESTAPI/4423.htm). - * **Label**. Name of the resource. - * **URL**. URL of Tufin SecureTrack. - * **Username** - * **Password**
Tufin SecureTrack V2 configuration +* **Username**. Enter the username of a Tufin SecureTrack admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* + +Tufin SecureTrack V2 configuration For information about Tufin SecureTrack, see [Tufin SecureTrack documentation](https://forum.tufin.com/support/kc/latest/Content/Suite/RESTAPI/4420.htm). diff --git a/docs/platform-services/automation-service/app-central/integrations/urlhaus-abuse.md b/docs/platform-services/automation-service/app-central/integrations/urlhaus-abuse.md index 62146ec412..433dfb8ce0 100644 --- a/docs/platform-services/automation-service/app-central/integrations/urlhaus-abuse.md +++ b/docs/platform-services/automation-service/app-central/integrations/urlhaus-abuse.md @@ -20,12 +20,24 @@ Query domains, URLs, and hash values with URLhaus. ## Configure URLhaus Abuse in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [URLhaus Abuse API URL](https://urlhaus.abuse.ch/api/), for example, `https://urlhaus.abuse.ch/api/`. + +* +* +* +* URLhaus Abuse configuration -For information about URLhause, see [URLhause documentation](https://urlhaus.abuse.ch/). +For information about URLhaus, see [URLhaus documentation](https://urlhaus.abuse.ch/). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/urlscan.io.md b/docs/platform-services/automation-service/app-central/integrations/urlscan.io.md index 0c657464a7..e08c7e3e48 100644 --- a/docs/platform-services/automation-service/app-central/integrations/urlscan.io.md +++ b/docs/platform-services/automation-service/app-central/integrations/urlscan.io.md @@ -25,9 +25,28 @@ Scan and analyze websites. When a URL is submitted to urlscan.io, an automated p ## Configure URLScan.io in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your URLScan [API](https://urlscan.io/docs/api/) URL. +* **API Key**. Enter your URLScan API key. +* +* +* +* +* +* +* URLScan.io configuration For information about URLScan.io, see [URLScan.io documentation](https://urlscan.io/docs/). diff --git a/docs/platform-services/automation-service/app-central/integrations/vectra.md b/docs/platform-services/automation-service/app-central/integrations/vectra.md index 0d7f467575..e2083ce6f7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vectra.md +++ b/docs/platform-services/automation-service/app-central/integrations/vectra.md @@ -28,17 +28,28 @@ Vectra AI detects and prioritises high-fidelity alerts in real time and responds 1. Sign in to [Vectra](https://apitest.vectracloudlab.com). 1. In the main page, click on the section **My Profile**.
vectra -1. Click on the copy button in API Token (or click generate a new token and then copy button). +1. Click on the copy button in [API Token](https://support.vectra.ai/vectra/article/KB-VS-1711) (or click generate a new token and then copy button). ## Configure Vectra in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your Vectra host address, for example `https://apitest.vectracloudlab.com/api/v2.2/`. - * **Label**. The name of the resource. - * **Host**. 'https://apitest.vectracloudlab.com/api/v2.2/' - * **Token**. API Token copied earlier.
Vectra configuration +* **Token**. Enter the [Vectra API token](https://support.vectra.ai/vectra/article/KB-VS-1711) you [copied earlier](#vectra-configuration). +* +* +* +* + +Vectra configuration For information about Vectra, see [Vectra documentation.](https://support.vectra.ai/vectra/knowledge) diff --git a/docs/platform-services/automation-service/app-central/integrations/virustotal-v3.md b/docs/platform-services/automation-service/app-central/integrations/virustotal-v3.md index bb42ac19c7..a713354f29 100644 --- a/docs/platform-services/automation-service/app-central/integrations/virustotal-v3.md +++ b/docs/platform-services/automation-service/app-central/integrations/virustotal-v3.md @@ -36,8 +36,28 @@ Threat Intelligence-Reputation ## Configure VirusTotal v3 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your VirusTotal API URL, for example, `https://www.virustotal.com/`. + +* **API Key**. Enter your [VirusTotal API key](https://docs.virustotal.com/docs/please-give-me-an-api-key). +* +* +* +* +* +* +* VirusTotal v3 configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/virustotal.md b/docs/platform-services/automation-service/app-central/integrations/virustotal.md index cba587d3af..92d5df5d60 100644 --- a/docs/platform-services/automation-service/app-central/integrations/virustotal.md +++ b/docs/platform-services/automation-service/app-central/integrations/virustotal.md @@ -35,8 +35,28 @@ Threat Intelligence-Reputation ## Configure VirusTotal in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter your VirusTotal API URL, for example, `https://www.virustotal.com/`. + +* **API Key**. Enter your [VirusTotal API key](https://docs.virustotal.com/docs/please-give-me-an-api-key). +* +* +* +* +* +* +* VirusTotal configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/vmray.md b/docs/platform-services/automation-service/app-central/integrations/vmray.md index 40b31cb3dc..dcfd8a79b2 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmray.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmray.md @@ -23,8 +23,21 @@ VMRay Platform products provide set of tools for malware detection and analysis. ## Configure VMRay in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [VMRay host address](https://www.vmray.com/how-to-create-easy-and-open-integrations-with-vmrays-rest-api/#elementor-toc__heading-anchor-1). + +* **API Key**. Enter your [VMRay API key](https://www.vmray.com/basic-automation-with-the-vmray-api/#elementor-toc__heading-anchor-3). +* +* +* +* VMRay configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard-v2.md b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard-v2.md index a35736e058..afac9fb1ff 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard-v2.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard-v2.md @@ -28,12 +28,29 @@ VMware Carbon Black Cloud Endpoint Standard Integration allows security operator ## Configure VMware Carbon Black Cloud Endpoint Standard V2 in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Server URL**. Enter your VMWare Carbon Black Cloud Endpoint Standard V2 server URL. + +* **Organization Key**. Enter your [VMWare Carbon Black Cloud Endpoint Standard V2 organization key](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#org-key). + +* **API ID/Connector ID**. [VMWare Carbon Black Cloud Endpoint Standard V2 API ID](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#authenticate-your-request). + +* **API Secret Key**. Enter the secret for the API ID. +* +* +* +* VMware Carbon Black Cloud Endpoint Standard V2 configuration -For information about Carbon Black Cloud, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html). +For information about Carbon Black Cloud Endpoint Standard V2, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard.md b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard.md index 5c9537e16b..dff3397101 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard.md @@ -31,14 +31,27 @@ VMware Carbon Black Cloud Endpoint Standard Integration allows security operator ## Configure VMware Carbon Black Cloud Enterprise EDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter the URL to the API of the VMware Carbon Black Cloud Endpoint Standard instance, for example, `https://defense.conferdeploy.net`. - * **Label**. The name of the resource. - * **API URL**. URL to the API of the VMware Carbon Black Cloud Endpoint Standard instance `https://defense.conferdeploy.net`. - * **Organization Key**. The Organization Key you copied earlier. - * **API ID**. The API ID that you copied earlier. - * **API Secret Key**. The API Secret Key that you copied earlier.
VMware Carbon Black Cloud Endpoint Standard configuration +* **Organization Key**. Enter the [organization key](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#org-key) you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration). + +* **API ID**. Enter the [API ID](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-user-guide-tile/GUID-9620FAB7-FE70-45DE-9CAB-590FA358721F-en/GUID-7AA95653-EF83-4F49-B11F-F984F7D62CB8-en/GUID-F3816FB5-969F-4113-80FC-03981C65F969-en.html) that you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration). + +* **API Secret Key**. Enter the secret for the API ID that you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration). +* +* +* +* + +VMware Carbon Black Cloud Endpoint Standard configuration For information about Carbon Black Cloud, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-enterprise-edr.md b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-enterprise-edr.md index e7b65badbc..1e99c47da1 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-enterprise-edr.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-enterprise-edr.md @@ -34,14 +34,34 @@ VMware Carbon Black Cloud Enterprise EDR Integration Interact with watchlists, f ## Configure VMware Carbon Black Cloud Enterprise EDR in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. Enter the URL to the API of the VMware Carbon Black Cloud Enterprise EDR instance, for example, `https://defense.conferdeploy.net`. - * **Label**. The name of the resource. - * **API URL**. URL to the API of the VMware Carbon Black Cloud Enterprise EDR instance `https://defense.conferdeploy.net`. - * **Organization Key**. The Organization Key you copied earlier. - * **API ID**. The API ID that you copied earlier. - * **API Secret Key**. The API Secret Key that you copied earlier.
VMware Carbon Black Cloud Enterprise EDR configuration +* **Organization Key**. Enter the [organization key](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#org-key) you [copied earlier](#vmware-carbon-black-cloud-enterprise-edr-configuration). + +* **API ID**. Enter the [API ID](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-user-guide-tile/GUID-9620FAB7-FE70-45DE-9CAB-590FA358721F-en/GUID-7AA95653-EF83-4F49-B11F-F984F7D62CB8-en/GUID-F3816FB5-969F-4113-80FC-03981C65F969-en.html) that you [copied earlier](#vmware-carbon-black-cloud-enterprise-edr-configuration). + +* **API Secret Key**. Enter the API secret to the API I that you [copied earlier](#vmware-carbon-black-cloud-enterprise-edr-configuration). +* +* +* **Cloud SOAR URL**. Enter your [Cloud SOAR URL (for legacy installations)](/docs/cloud-soar/legacy/legacy-cloud-soar-apis/#base-path-for-api-requests). + +* **Cloud SOAR JWT Token**. Enter a [Cloud SOAR JWT token (for legacy installations)](/docs/cloud-soar/legacy/legacy-cloud-soar-apis/#generate-an-api-token). +* +* + +VMware Carbon Black Cloud Enterprise EDR configuration For information about Carbon Black Cloud, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-platform.md b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-platform.md index 0da7bf29e5..757c750cbf 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-platform.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-platform.md @@ -54,14 +54,34 @@ VMware Carbon Black Cloud Platform Integration transform your security with inte ## Configure VMware Carbon Black Cloud Platform in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; +* +* **API URL**. URL to the API of the VMware Carbon Black Cloud Platform instance `https://defense.conferdeploy.net`. - * **Label**. The name of the resource. - * **API URL**. URL to the API of the VMware Carbon Black Cloud Platform instance `https://defense.conferdeploy.net`. - * **Organization Key**. The Organization Key you copied earlier. - * **API ID / Connector ID**. The API ID that you copied earlier. - * **API Secret Key**. The API Secret Key that you copied earlier.
VMware Carbon Black Cloud Platform configuration +* **Organization Key**. The [organization key](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#org-key) you [copied earlier](#vmware-carbon-black-cloud-platform-configuration). + +* **API ID / Connector ID**. The [API ID](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-user-guide-tile/GUID-9620FAB7-FE70-45DE-9CAB-590FA358721F-en/GUID-7AA95653-EF83-4F49-B11F-F984F7D62CB8-en/GUID-F3816FB5-969F-4113-80FC-03981C65F969-en.html) that you [copied earlier](#vmware-carbon-black-cloud-platform-configuration). + +* **API Secret Key**. The secret for the API ID that you [copied earlier](#vmware-carbon-black-cloud-platform-configuration). +* +* +* +* +* +* +* + +VMware Carbon Black Cloud Platform configuration For information about Carbon Black Cloud, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html). diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-vsphere.md b/docs/platform-services/automation-service/app-central/integrations/vmware-vsphere.md index caffcb6496..d412851617 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-vsphere.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-vsphere.md @@ -40,8 +40,29 @@ The following permissions are required for the integration: ## Configure VMware vSphere in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your [VMware vSphere host address](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/configuring-vcenter-server-8-0/configuring-vcenter-server-using-the-vsphere-client/configuring-vcenter-server-in-the-vsphere-client/configure-runtime-settings-for-vcenter-server-in-the-vsphere-client.html). + +* **Protocol**. Select the protocol: + * **HTTPS** + * **HTTP** + +* **Port**. Enter your [VMware vSphere port](https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/configuring-vcenter-server-8-0/configuring-vcenter-server-using-the-vsphere-client/configuring-vcenter-server-in-the-vsphere-client/view-port-settings-in-the-vsphere-client.html). + +* **Username**. Enter the username of a VMware vSphere admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* VMware vSphere configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/vmware-workspace-one.md b/docs/platform-services/automation-service/app-central/integrations/vmware-workspace-one.md index c33caefdf6..4f8cb3f8bb 100644 --- a/docs/platform-services/automation-service/app-central/integrations/vmware-workspace-one.md +++ b/docs/platform-services/automation-service/app-central/integrations/vmware-workspace-one.md @@ -34,15 +34,29 @@ Enable API access in the Workspace ONE UEM console using these steps: ## Configure VMware Workspace ONE in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your VMware Workspace ONE URL, for example, `https://techp-as.awmdm.com/API`. - * **URL**. `https://techp-as.awmdm.com/API`. - * **Username**. Workspace ONE Login Username. - * **Password**. Workspace ONE Login Password. - * **API Key**. The previous generated API Key.
VMware Workspace ONE configuration +* **Username**. Enter the username of a Workspace ONE admin user. -For information about Omnissa Workspace ONE (formerly VMware Workspace ONE), see [Omnissa Workspace ONE documentation](https://docs.omnissa.com/category/Workspace_ONE). +* **Password**. Enter the password for the amin user. + +* **API Key**. Enter the API key you [copied earlier](#vmware-workspace-one-configuration). +* +* +* +* + +VMware Workspace ONE configuration + +For information about VMware Workspace ONE, see [Workspace ONE documentation](https://techdocs.broadcom.com/us/en/vmware-cis/other/vmware-identity-manager/3-1/integrating-airwatch-and-vmware-identity-manager-3-1/introduction-to-workspace-one.html). ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/whoisxml.md b/docs/platform-services/automation-service/app-central/integrations/whoisxml.md index 83f8aaa047..eb14d02719 100644 --- a/docs/platform-services/automation-service/app-central/integrations/whoisxml.md +++ b/docs/platform-services/automation-service/app-central/integrations/whoisxml.md @@ -22,12 +22,23 @@ WHOIS API service provides the registration details, also known as the WHOIS rec ## Configure WhoisXML in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [WhoisXML API URL](https://whois.whoisxmlapi.com/documentation/making-requests), for example, `https://www.whoisxmlapi.com`. - * **Label**. The desired name for the resource. - * **URL**. WhoisXML API URL. - * **API Key**. Your WhoisXML API Key.
WhoisXML configuration +* **API Key**. Enter your [WhoisXML API key](https://whois.whoisxmlapi.com/documentation/generate-new-api-key). +* +* +* +* + +WhoisXML configuration For information about WhoisXML, see [WhoisXML documentation](https://whois.whoisxmlapi.com/documentation/making-requests). diff --git a/docs/platform-services/automation-service/app-central/integrations/withsecure-elements.md b/docs/platform-services/automation-service/app-central/integrations/withsecure-elements.md index eff2e371b2..f04b1f4a94 100644 --- a/docs/platform-services/automation-service/app-central/integrations/withsecure-elements.md +++ b/docs/platform-services/automation-service/app-central/integrations/withsecure-elements.md @@ -30,13 +30,25 @@ WithSecure Elements is a single, modular solution consisting of a complete range ## Configure WithSecure Elements in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter the base API URL for WithSecure Elements. The default is `https://api.connect.withsecure.com/`. - * **Label**. The name for the resource. - * **URL**. The base API URL for WithSecure Elements. Default: `https://api.connect.withsecure.com/`. - * **Client ID**. Your previously retrieved Client ID. - * **Client Secret**. Your previously retrieved Client Secret.
WithSecure Elements configuration +* **Client ID**. Enter the client ID you [copied previously](#withsecure-elements-configuration). + +* **Client Secret**. Enter the client secret you [copied previously](#withsecure-elements-configuration). +* +* +* +* + +WithSecure Elements configuration For information about WithSecure Elements, see [WithSecure Elements documentation](https://www.withsecure.com/userguides/). diff --git a/docs/platform-services/automation-service/app-central/integrations/withsecure-endpoint-protection.md b/docs/platform-services/automation-service/app-central/integrations/withsecure-endpoint-protection.md index be3cc2693e..bbeb6695af 100644 --- a/docs/platform-services/automation-service/app-central/integrations/withsecure-endpoint-protection.md +++ b/docs/platform-services/automation-service/app-central/integrations/withsecure-endpoint-protection.md @@ -34,14 +34,27 @@ To generate an API key: ## Configure WithSecure Endpoint Protection in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**: Enter the base API URL for WithSecure Endpoint Protection, for example, `https://eu1.psb.fsapi.com`. - * **Label**: The name for the resource. - * **URL**: The base API URL for WithSecure Endpoint Protection. i.e. [http[s]://eu1.psb.fsapi.com](https://eu1.psb.fsapi.com) - * **API Key**: Your API Key. - * **Username**: Your username. - * **Password**: Your password.
WithSecure Endpoint Protection configuration +* **API Key**: Enter your WithSecure Endpoint Protection API key you [copied earlier](#withsecure-endpoint-protection-configuration). + +* **Username**: Enter the username for an WithSecure Endpoint Protection admin user authorized to authenticate the integration + +* **Password**: Enter the password for the admin user. +* +* +* +* + +WithSecure Endpoint Protection configuration For information about WithSecure Endpoint Protection, see [WithSecure Endpoint Protection documentation](https://www.withsecure.com/userguides/product.html?business/psb-portal/latest/en). diff --git a/docs/platform-services/automation-service/app-central/integrations/wittra.md b/docs/platform-services/automation-service/app-central/integrations/wittra.md index ed50387e58..fc7c6fbbf3 100644 --- a/docs/platform-services/automation-service/app-central/integrations/wittra.md +++ b/docs/platform-services/automation-service/app-central/integrations/wittra.md @@ -23,13 +23,25 @@ Wittra is hardware and software provider with patented solutions for business in ## Configure Wittra in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your [Wittra URL](https://docs.wittra.io/#/howto-integrations-and-api?id=use-the-api-key), for example, `https://api.wittra.se/`. - * **Label**. The desired name for the resource. - * **URL**. Your Wittra URL. - * **API Key**. Your Wittra API Key you copied earlier from Wittra. - * **Organization ID**. Your Organization ID you copied earlier from Wittra.
Wittra configuration +* **API Key**. Enter the [Wittra API key](https://docs.wittra.io/#/howto-integrations-and-api?id=set-up-api-key). + +* **Organization ID**. Enter your Wittra [organization ID](https://docs.wittra.io/#/howto-console?id=create-a-project). +* +* +* +* + +Wittra configuration For information about Wittra, see [Wittra documentation](https://docs.wittra.io/#/). diff --git a/docs/platform-services/automation-service/app-central/integrations/zendesk.md b/docs/platform-services/automation-service/app-central/integrations/zendesk.md index f8fa254356..4a8460a129 100644 --- a/docs/platform-services/automation-service/app-central/integrations/zendesk.md +++ b/docs/platform-services/automation-service/app-central/integrations/zendesk.md @@ -35,8 +35,25 @@ Please ensure that you consult the corresponding guide to activate the API and g ## Configure Zendesk in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **URL**. Enter your Zendesk URL, for example, `https://your-domain.zendesk.com`. + +* **Username**. Enter the username of a Zendesk admin user authorized to authenticate the integration. + +* **API Token**. Enter your [Zendesk API token](https://support.zendesk.com/hc/en-us/articles/4408889192858-Managing-access-to-the-Zendesk-API#topic_bsw_lfg_mmb). + +* **Password**. Enter the password for the admin user. +* +* +* +* Zendesk configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/zerofox.md b/docs/platform-services/automation-service/app-central/integrations/zerofox.md index aea5b81bce..f15e856697 100644 --- a/docs/platform-services/automation-service/app-central/integrations/zerofox.md +++ b/docs/platform-services/automation-service/app-central/integrations/zerofox.md @@ -31,8 +31,21 @@ Query data and utilize action in ZeroFox Platform. ## Configure ZeroFox in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **Host**. Enter your ZeroFox host address. + +* **Token**. Enter your ZeroFox token. +* +* +* +* ZeroFox configuration diff --git a/docs/platform-services/automation-service/app-central/integrations/zip-tools.md b/docs/platform-services/automation-service/app-central/integrations/zip-tools.md index 6cb182a910..cc2a309d58 100644 --- a/docs/platform-services/automation-service/app-central/integrations/zip-tools.md +++ b/docs/platform-services/automation-service/app-central/integrations/zip-tools.md @@ -23,11 +23,29 @@ ZIP Tools is used to work with archives, in particular to extract and save the C ## Configure Zip Tools in Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md'; +import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md'; +import AccessID from '../../../../reuse/automation-service/access-id.md'; +import AccessKey from '../../../../reuse/automation-service/access-key.md'; - - * Set the **Cloud SOAR API URL** (for example, `https://api.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. - * Provide the **Access ID** and **Access Key** from a Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys.
Zip Tools configuration +* +* +* +* +* **Password**. Enter the Zip file password. + +* +* +* +* + +Zip Tools configuration ## Change Log diff --git a/docs/platform-services/automation-service/app-central/integrations/zoom.md b/docs/platform-services/automation-service/app-central/integrations/zoom.md index 5051afdd17..8603e985c7 100644 --- a/docs/platform-services/automation-service/app-central/integrations/zoom.md +++ b/docs/platform-services/automation-service/app-central/integrations/zoom.md @@ -53,18 +53,31 @@ Follow these steps to [create a Server-to-Server OAuth app](https://developers.z ## Configure Zoom in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **OAuth Token URL**. Enter the the Zoom OAuth Token URL. The default is `https://zoom.us/`. -For information about Zoom, see [Zoom documentation](https://developers.zoom.us/docs/). +* **API URL**. Enter the Zoom API URL. The default is `https://api.zoom.us/`. + +* **Client ID**. Enter the Zoom client ID for the application you [created earlier](#zoom-configuration). + +* **Client Secret**. Enter the Zoom client secret for the application you [created earlier](#zoom-configuration). - * **Label**. The resource name. - * **OAuth Token URL**. The default OAuth Token url is 'https://zoom.us/'. - * **API URL**. The default API url is 'https://api.zoom.us/'. - * **Client ID**. Your Client ID for your application listed on 'https://marketplace.zoom.us/user/build'. - * **Client Secret**. Your Client Secret for your application listed on 'https://marketplace.zoom.us/user/build'. - * **Account ID**. Your Account ID for your application listed on 'https://marketplace.zoom.us/user/build'.
Zoom configuration +* **Account ID**. Enter the account ID for the application you [created earlier](#zoom-configuration). +* +* +* +* +Zoom configuration + +For information about Zoom, see [Zoom documentation](https://developers.zoom.us/docs/). ## Category diff --git a/docs/platform-services/automation-service/app-central/integrations/zscaler.md b/docs/platform-services/automation-service/app-central/integrations/zscaler.md index 800336927c..2b6f0f7464 100644 --- a/docs/platform-services/automation-service/app-central/integrations/zscaler.md +++ b/docs/platform-services/automation-service/app-central/integrations/zscaler.md @@ -37,8 +37,25 @@ Security gateway ## Configure Zscaler in Automation Service and Cloud SOAR import IntegrationsAuth from '../../../../reuse/integrations-authentication.md'; +import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md'; +import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md'; +import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md'; +import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md'; +import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md'; +* +* **API URL**. Enter your [Zscaler API base URL](https://help.zscaler.com/oneapi/getting-started#LocateBaseURL). + +* **API Key**. Enter your [Zscaler API key](https://help.zscaler.com/zidentity/about-api-clients). + +* **Username**. Enter the username of a Zscaler admin user authorized to authenticate the integration. + +* **Password**. Enter the password for the admin user. +* +* +* +* Zscaler configuration diff --git a/docs/reuse/automation-service/access-id.md b/docs/reuse/automation-service/access-id.md new file mode 100644 index 0000000000..a4d9b81baa --- /dev/null +++ b/docs/reuse/automation-service/access-id.md @@ -0,0 +1 @@ +**Access ID**. Enter the access ID for your Sumo Logic [access key](/docs/manage/security/access-keys/). Select **Default** as the scope when generating access keys. \ No newline at end of file diff --git a/docs/reuse/automation-service/access-key.md b/docs/reuse/automation-service/access-key.md new file mode 100644 index 0000000000..b4e8660fe6 --- /dev/null +++ b/docs/reuse/automation-service/access-key.md @@ -0,0 +1 @@ +**Access Key**. Enter the access key corresponding to your Sumo Logic access ID. \ No newline at end of file diff --git a/docs/reuse/automation-service/aws/access-key.md b/docs/reuse/automation-service/aws/access-key.md new file mode 100644 index 0000000000..bcbf60634b --- /dev/null +++ b/docs/reuse/automation-service/aws/access-key.md @@ -0,0 +1 @@ +**Access Key ID**. Enter an AWS [access key ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) to provide authentication. (Although AWS recommends using IAM roles with temporary security credentials instead of access keys, our AWS integrations currently support only access keys due to the need for dynamically managed credentials.) \ No newline at end of file diff --git a/docs/reuse/automation-service/aws/region.md b/docs/reuse/automation-service/aws/region.md new file mode 100644 index 0000000000..c0092a8ff0 --- /dev/null +++ b/docs/reuse/automation-service/aws/region.md @@ -0,0 +1 @@ +**AWS Region**. Enter your [AWS region](https://docs.aws.amazon.com/global-infrastructure/latest/regions/aws-regions.html). \ No newline at end of file diff --git a/docs/reuse/automation-service/aws/secret.md b/docs/reuse/automation-service/aws/secret.md new file mode 100644 index 0000000000..a626e27346 --- /dev/null +++ b/docs/reuse/automation-service/aws/secret.md @@ -0,0 +1 @@ +**Secret Access Key**. Enter the secret access key associated with the access key ID. \ No newline at end of file diff --git a/docs/reuse/automation-service/cloud-soar-api-url.md b/docs/reuse/automation-service/cloud-soar-api-url.md new file mode 100644 index 0000000000..55fd24a6a4 --- /dev/null +++ b/docs/reuse/automation-service/cloud-soar-api-url.md @@ -0,0 +1 @@ +**Cloud SOAR API URL**. Enter your Sumo Logic API URL (for example, `https://api.us2.sumologic.com`). Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region. \ No newline at end of file diff --git a/docs/reuse/automation-service/integration-certificate.md b/docs/reuse/automation-service/integration-certificate.md new file mode 100644 index 0000000000..661076e8ce --- /dev/null +++ b/docs/reuse/automation-service/integration-certificate.md @@ -0,0 +1 @@ +**Verify Server Certificate**. Select to validate the server’s SSL certificate. \ No newline at end of file diff --git a/docs/reuse/automation-service/integration-engine.md b/docs/reuse/automation-service/integration-engine.md new file mode 100644 index 0000000000..5ad4705f4c --- /dev/null +++ b/docs/reuse/automation-service/integration-engine.md @@ -0,0 +1 @@ +**Automation Engine**. Select **Cloud execution** for this certified integration. Select a bridge option only for a custom integration. See [Cloud or Bridge execution](/docs/platform-services/automation-service/automation-service-integrations/#cloud-or-bridge-execution). \ No newline at end of file diff --git a/docs/reuse/automation-service/integration-label.md b/docs/reuse/automation-service/integration-label.md new file mode 100644 index 0000000000..9ecba612fb --- /dev/null +++ b/docs/reuse/automation-service/integration-label.md @@ -0,0 +1 @@ +**Label**. Enter the name you want to use for the resource. \ No newline at end of file diff --git a/docs/reuse/automation-service/integration-proxy.md b/docs/reuse/automation-service/integration-proxy.md new file mode 100644 index 0000000000..81dae1b3ec --- /dev/null +++ b/docs/reuse/automation-service/integration-proxy.md @@ -0,0 +1,4 @@ +**Proxy Options**. Select whether to use a proxy. (Applies only if the automation engine uses a bridge instead of cloud execution.) + * **Use no proxy**. Communication runs on the bridge and does not use a proxy. + * **Use default proxy**. Use the default proxy for the bridge set up as described in [Using a proxy](/docs/platform-services/automation-service/automation-service-bridge/#using-a-proxy). + * **Use different proxy**. Use your own proxy service. Provide the proxy URL and port number. \ No newline at end of file diff --git a/docs/reuse/automation-service/integration-timeout.md b/docs/reuse/automation-service/integration-timeout.md new file mode 100644 index 0000000000..60bdb69504 --- /dev/null +++ b/docs/reuse/automation-service/integration-timeout.md @@ -0,0 +1 @@ +**Connection Timeout (s)**. Set the maximum amount of time the integration will wait for a server's response before terminating the connection. Enter the connection timeout time in seconds (for example, `180`). \ No newline at end of file diff --git a/docs/reuse/automation-service/sumo-logic-api-url.md b/docs/reuse/automation-service/sumo-logic-api-url.md new file mode 100644 index 0000000000..18f34b5594 --- /dev/null +++ b/docs/reuse/automation-service/sumo-logic-api-url.md @@ -0,0 +1 @@ +**Sumo Logic API URL**. Enter the [API endpoint URL](/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security) for your region (for example, `https://api.sumologic.com`). \ No newline at end of file diff --git a/docs/reuse/integrations-authentication.md b/docs/reuse/integrations-authentication.md index 15ba348df5..06d370aeac 100644 --- a/docs/reuse/integrations-authentication.md +++ b/docs/reuse/integrations-authentication.md @@ -10,4 +10,4 @@ Before you can use this automation integration, you must configure its authentic 1. Hover over the resource name and click the **Edit** button that appears.
Edit a resource -In the configuration dialog, enter information from the product you're integrating with. When done, click **TEST** to test the configuration, and click **SAVE** to save the configuration. \ No newline at end of file +In the configuration dialog, enter information from the product you're integrating with. When done, click **TEST** to test the configuration, and click **SAVE** to save the configuration: \ No newline at end of file diff --git a/static/img/platform-services/automation-service/app-central/integrations/misc/sumologic-automation-tools.png b/static/img/platform-services/automation-service/app-central/integrations/misc/sumologic-automation-tools.png new file mode 100644 index 0000000000..62cf189fee Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/misc/sumologic-automation-tools.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail/sumo-logic-notifications-by-gmail-7.png b/static/img/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail/sumo-logic-notifications-by-gmail-7.png index 1e85f18078..b7a1312a48 100644 Binary files a/static/img/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail/sumo-logic-notifications-by-gmail-7.png and b/static/img/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-gmail/sumo-logic-notifications-by-gmail-7.png differ