GCenter 103
This integration fetch events generated by the GCenter appliance.
Network Security · Gatewatcher AionIQ
Configuration parameters
ip— GCenter IP address or FQDN (required)token—credentials— GCenter accountversion— GCenter Versioncheck_cert— Check the TLS certificateproxy— Use system proxy settingsisFetch— Fetch incidentsfetch_type— Fetch incidents from typeengine_selection— Engine alerts selectionfirst_fetch— First fetchmax_fetch— Fetch limitincidentType— Incident type
Commands (33)
-
gcenter103-alerts-getGet an alert with its UUID (corresponds to event.id field) or the GCenter ID of the alert.
-
gcenter103-alerts-listList all alerts.
-
gcenter103-alerts-note-addAdd or update a note to an alert.
-
gcenter103-alerts-note-removeDelete the note of an alert.
-
gcenter103-alerts-status-updateUpdate status of an alert.
-
gcenter103-alerts-tags-addAdd or update tags of an alert.
-
gcenter103-alerts-tags-getGet the tags of an alert.
-
gcenter103-alerts-tags-removeRemove tags from an alert.
-
gcenter103-assets-alerts-getRetrieve alerts of a given asset.
-
gcenter103-assets-getRetrieve specific asset data.
-
gcenter103-assets-listList all assets.
-
gcenter103-assets-note-addAdd or update a note to an asset.
-
gcenter103-assets-note-removeRemove a note from an asset.
-
gcenter103-assets-tags-addAdd or update the tags of an asset.
-
gcenter103-assets-tags-getGet the tags of an asset.
-
gcenter103-assets-tags-removeRemove tags of an asset.
-
gcenter103-file-scanScan a file on a selected engine. You must upload the file to scan before execution.
-
gcenter103-file-scan-result-getRetrieve previous scan by its ID.
-
gcenter103-malcore-fingerprints-addAdd fingerprints to white or black list to Malcore.
-
gcenter103-malcore-fingerprints-getGet fingerprints of the white or black list of Malcore.
-
gcenter103-malcore-fingerprints-removeRemove fingerprints to white or black list to Malcore.
-
gcenter103-raw-alerts-file-getGet a file attached to an alert with its UUID.
-
gcenter103-raw-alerts-getGet a raw alert with its UUID.
-
gcenter103-users-alerts-getRetrieves a list of the alerts of a Kerberos user.
-
gcenter103-users-getRetrieves Kerberos user data.
-
gcenter103-users-listRetrieves a list of Kerberos users.
-
gcenter103-users-note-addAdd or update the note of a Kerberos user.
-
gcenter103-users-note-removeRemove the note of a Kerberos user.
-
gcenter103-users-tags-addAdd or update the tags of a Kerberos user.
-
gcenter103-users-tags-getGet the tags of a Kerberos user.
-
gcenter103-users-tags-removeRemove tags of a Kerberos user.
-
gcenter103-yara-rules-addAdd YARA rules to Malcore. You must upload the YARA file before execution.
-
gcenter103-yara-rules-getGet YARA settings.