CyberArkPAS

Use the CyberArk Privileged Access Management (PAM) solution to manage users, safes, vaults, and accounts from Cortex XSOAR.

Authentication & Identity Management · CyberArk

Configuration parameters

  • url — Server URL (e.g., https://example.net) (required)
  • credentials — Username (required)
  • isFetch — Fetch incidents
  • max_fetch — Max fetch
  • fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
  • score — CyberArk PAM score (0.0-100.0)
  • incidentType — Incident type
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (26)

  • cyberark-pas-account-add

    Add a new privileged account or SSH key to the vault.

  • cyberark-pas-account-delete

    Delete a specific account in the vault.

  • cyberark-pas-account-get-details

    Returns information for the specified account, identified by the account ID.

  • cyberark-pas-account-get-list-activity

    Returns the activities of a specific account that is identified by its account ID.

  • cyberark-pas-account-update

    Update the details of an existing account.

  • cyberark-pas-accounts-list

    Return a list of all the accounts in the vault.

  • cyberark-pas-credentials-change-in-vault-only

    Enable users to set account credentials and change them in the vault.

  • cyberark-pas-credentials-change-random-password

    Mark an account for an immediate credentials change by the CPM to a new random value.

  • cyberark-pas-credentials-change-set-new-password

    Enable users to set the account's credentials to use for the next Central Policy Manager (CPM) change.

  • cyberark-pas-credentials-reconcile

    Mark an account for automatic reconciliation by the Central Policy Manager (CPM).

  • cyberark-pas-credentials-verify

    Mark an account for verification by the Central Policy Manager (CPM).

  • cyberark-pas-safe-add

    Add a new safe to the vault.

  • cyberark-pas-safe-delete

    Delete a safe from the vault.

  • cyberark-pas-safe-get-by-name

    Return information about a specific safe in the vault.

  • cyberark-pas-safe-member-add

    Add an existing user as a safe member.

  • cyberark-pas-safe-member-delete

    Remove a specific member from a safe.

  • cyberark-pas-safe-member-update

    Update an existing safe member.

  • cyberark-pas-safe-members-list

    Return a list of the members of the safe.

  • cyberark-pas-safe-update

    Update a single safe in the vault.

  • cyberark-pas-safes-list

    Return information about all of the user’s safes in the vault.

  • cyberark-pas-security-events-get

    Return all Privileged Threat Analytics (PTA) security events.

  • cyberark-pas-user-activate

    Activate an existing vault user who was suspended after entering incorrect credentials multiple times.

  • cyberark-pas-user-add

    Add a new user to the vault.

  • cyberark-pas-user-delete

    Delete a specific user in the vault.

  • cyberark-pas-user-update

    Update an existing vault user.

  • cyberark-pas-users-list

    Return a list of all existing users in the vault that meet the filter and search criteria.