Connecting to Cybereason

Welcome Forums Integrations Connecting to Cybereason

  • This topic is empty.
Viewing 1 post (of 1 total)
  • Author
    Posts
  • #3168
    Mike RiforgiateMike Riforgiate
    Keymaster

    PRECINCT CONFIGURATION

    • Go to Admin > SOAR > Cybereason > Config
    • Click the checkbox for Enable Cybereason integration
    • Paste the API Server, Username, and Password
    • Click the disk icon (Save)
    • Click Jobs and go to Artifacts from Cybereason
    • Select Triggers, expanding Manual Trigger and Interval Trigger. 
      • Toggle both to State: ENABLED
    • The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization.
    • Click the disk icon (Save)

     

    • Go to Cybereason Asset Inventory job
    • Select Triggers, expanding Manual Trigger and Interval Trigger. 
      • Toggle both to State: ENABLED
    • The Interval Trigger is set to 1 day by default, but you can update it to what best suits your organization.
    • Click the disk icon (Save)
Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.