Connecting to Cybereason

[Mike Riforgiate]

PRECINCT CONFIGURATION

• Go to Admin > SOAR > Cybereason > Config
• Click the checkbox for Enable Cybereason integration
• Paste the API Server, Username, and Password
• Click the disk icon (Save)
• Click Jobs and go to Artifacts from Cybereason
• Select Triggers, expanding Manual Trigger and Interval Trigger. 
  • Toggle both to State: ENABLED
• The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization.
• Click the disk icon (Save)

 

• Go to Cybereason Asset Inventory job
• Select Triggers, expanding Manual Trigger and Interval Trigger. 
  • Toggle both to State: ENABLED
• The Interval Trigger is set to 1 day by default, but you can update it to what best suits your organization.
• Click the disk icon (Save)

[Author]

Posts