KeeperSecurity

Details

ID	`KeeperSecurity`
Provider	Keeper Security Inc.
Category	Authentication & Identity Management
From Version	6.8.0
Docker Image	`demisto/keepercommander:1.0.0.10182333`
Supported Modules	XSIAM

README

Use this integration to fetch audit logs from Keeper Security Admin Console as XSIAM events.
This integration was integrated and tested with version 16.11.8 of Keeper Commander.

Configure Keeper Secrets Manager Event Collector in Cortex

Parameter	Description	Required
Server URL	The server URL. For more help, checkout the ‘Server Regions’ section in the description.	True
Username		True
Password		True
Maximum number of Alerts to fetch.	The maximum number of Alert events to fetch.
Trust any certificate (not secure)		False
Use system proxy settings		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

keeper-security-register-start

Use this command to start the registration process.

Base Command

keeper-security-register-start

Input

There are no input arguments for this command.

Context Output

There is no context output for this command.

Human Readable Output

Code was sent successfully to the user’s email

keeper-security-register-complete

Use this command to complete the registration process.

Base Command

keeper-security-register-complete

Input

Argument Name	Description	Required
code	The authorization code retrieved from user’s email.	Optional

Context Output

There is no context output for this command.

Human Readable Output

Login completed

keeper-security-register-test

Use this command to test the connectivity of the instance.

Base Command

keeper-security-register-test

Input

There is no context output for this command.

Context Output

There is no context output for this command.

Human Readable Output

Successful connection

Configuration parameters

url — Server URL (required)
credentials — Username (required)
alerts_max_fetch — Maximum number of Alerts to fetch.
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (3)

keeper-security-register-complete
Use this command to complete the registration process.
keeper-security-register-start
Use this command to start the registration process.
keeper-security-register-test
Use this command to test the connectivity of the instance.

Source

KeeperSecurity.py KeeperSecurity_test.py KeeperSecurity.yml KeeperSecurity_description.md command_examples.txt

Download History Raw

category: Authentication & Identity Management
provider: Keeper Security Inc.
sectionorder:
- Connect
- Collect
commonfields:
  id: KeeperSecurity
  version: -1
configuration:
- defaultvalue: keepersecurity.com
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
  additionalinfo: The server URL. For more help, checkout the 'Server Regions' section in the description.
- display: Username
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
  section: Connect
  displaypassword: Password
- defaultvalue: "10000"
  display: Maximum number of Alerts to fetch.
  name: alerts_max_fetch
  type: 0
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: Use this integration to fetch audit logs from Keeper Security Admin Console as XSIAM events.
display: Keeper Security
name: KeeperSecurity
script:
  commands:
  - arguments:
    - description: The authorization code retrieved from user's email.
      name: code
      required: false
    description: "Use this command to complete the registration process."
    name: keeper-security-register-complete
  - description: "Use this command to start the registration process."
    name: keeper-security-register-start
    arguments: []
  - description: Use this command to test the connectivity of the instance.
    name: keeper-security-register-test
    arguments: []
  runonce: false
  isfetchevents: true
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/keepercommander:1.0.0.10182333
fromversion: 6.8.0
marketplaces:
- marketplacev2
- platform
tests:
- No tests (auto formatted)
supportedModules:
- xsiam