Genetec Security Center Event Collector

Details

ID	`Genetec Security Center Event Collector`
Provider	Genetec
Category	Analytics & SIEM
From Version	6.8.0
Docker Image	`demisto/xml-feed:1.0.0.10133006`
Supported Modules	XSIAM

README

Security Center is the foundation of our unified security portfolio. It lets you connect your security at your own pace, starting with a single core system. Even if you’re only interested in upgrading your video surveillance or access control, taking the next step is easy.

Configure Armis Event Collector in Cortex

Parameter	Description	Required
Your server URL		True
Username	Username and Password.	True
Password		True
Application ID		True
Trust any certificate (not secure)		False
Use system proxy settings		False
Maximum number of events per fetch	Alerts and activity events.
Use system proxy settings for external requests	Use this if you wish to use proxy setting for external requests (such as sending events) when running with an engine.

Commands

You can execute these commands in the War Room in the CLI in Cortex XSIAM.

genetec-security-center-get-events

Manual command to fetch events and display them.

Base Command

genetec-security-center-get-events

Input

Argument Name	Description	Required
limit	The maximum amount of events to retrieve.	Optional
should_push_events	Set this argument to True in order to create events, otherwise the command will only display them.	Required
start_time	The start time to fetch_from, should be in the format of YYYY-MM-DDTHH:MM:SS (e.g. 2024-02-21T23:00:00).	Optional

Context Output

There is no context output for this command.

Configuration parameters

url — Server URL (e.g., http://192.168.10.1:52311) (required)
credentials — Username (required)
app_id — Application ID (required)
max_fetch — Maximum number of events per fetch
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (1)

genetec-security-center-get-events
Manual execution of fetch-events. Use this for debugging purposes.

Source

GenetecSecurityCenterEventCollector.py GenetecSecurityCenterEventCollector_test.py GenetecSecurityCenterEventCollector.yml GenetecSecurityCenterEventCollector_description.md command_examples.txt

Download History Raw

category: Analytics & SIEM
provider: Genetec
commonfields:
  id: Genetec Security Center Event Collector
  version: -1
configuration:
- display: Server URL (e.g., http://192.168.10.1:52311)
  name: url
  required: true
  type: 0
  section: Connect
- name: credentials
  display: Username
  required: true
  defaultvalue:
  type: 9
  additionalinfo: Username and password.
  displaypassword: Password
  section: Connect
- required: true
  display: Application ID
  name: app_id
  type: 0
  section: Connect
- display: Maximum number of events per fetch
  name: max_fetch
  additionalinfo: Alerts and activity events.
  type: 0
  defaultvalue: 1000
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Genetec Security Center Audit Trail Event Collector.
display: Genetec Security Center Event Collector
name: Genetec Security Center Event Collector
script:
  commands:
  - description: Manual execution of fetch-events. Use this for debugging purposes.
    name: genetec-security-center-get-events
    arguments:
    - name: limit
      description: The maximum amount of events to retrieve.
    - auto: PREDEFINED
      defaultValue: "False"
      description: Set this argument to True in order to create events, otherwise the command will only display them.
      name: should_push_events
      predefined:
      - "True"
      - "False"
      required: true
    - name: start_time
      description: The start time to fetch_from, should be in the format of YYYY-MM-DDTHH:MM:SS (e.g. 2024-02-21T23:00:00).
    - name: end_time
      description: The end time to fetch_from, should be in the format of YYYY-MM-DDTHH:MM:SS (e.g. 2024-02-21T23:00:00).
  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/xml-feed:1.0.0.10133006
  isfetchevents: true
marketplaces:
- marketplacev2
- platform
fromversion: 6.8.0
tests:
- No tests (auto formatted)
supportedModules:
- xsiam