LookoutMobileEndpointSecurity

Lookout Mobile Endpoint Security (MES) provides visibility and protection against mobile threats with AI-driven mobile security dataset.

Analytics & SIEM · Lookout Mobile Endpoint Security (MES)

Details

IDLookoutMobileEndpointSecurity
ProviderLookout Inc.
CategoryAnalytics & SIEM
From Version8.4.0
Docker Imagedemisto/sse-client:1.0.0.10133006
Supported ModulesAgentix XSIAM

README

Lookout Mobile Endpoint Security (MES) provides visibility and protection against mobile threats with AI-driven mobile security dataset.
This integration was integrated and tested with version v2 of LookoutMobileEndpointSecurity.

Configure Lookout Mobile Endpoint Security Event Collector in Cortex

Parameter Required
Server URL False
Application Key False
Trust any certificate (not secure) False
Use system proxy settings False
Fetch interval in seconds True
Event types to fetch True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

Configuration parameters

  • server_url — Server URL
  • app_key
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • fetch_interval — Fetch interval in seconds (required)
  • longRunning — Long Running Instance
  • event_types — Event types to fetch (required)

Commands (0)

This integration defines no commands.

commonfields:
  id: LookoutMobileEndpointSecurity
  version: -1
category: Analytics & SIEM
provider: Lookout Inc.
sectionorder:
- Connect
- Collect
configuration:
- defaultvalue: https://api.lookout.com/
  display: Server URL
  name: server_url
  required: false
  type: 0
  section: Connect
- displaypassword: Application Key
  name: app_key
  hiddenusername: true
  required: false
  type: 9
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
- display: Fetch interval in seconds
  name: fetch_interval
  type: 0
  defaultvalue: 60
  required: true
  section: Collect
  advanced: true
- defaultvalue: 'true'
  display: Long Running Instance
  hidden: true
  name: longRunning
  type: 8
  section: Connect
- defaultvalue: All
  display: Event types to fetch
  name: event_types
  options:
  - Threat
  - Device
  - Audit
  - All
  required: true
  type: 16
  advanced: true
  section: Collect
description: Lookout Mobile Endpoint Security (MES) provides visibility and protection against mobile threats with AI-driven mobile security dataset.
display: Lookout Mobile Endpoint Security
name: LookoutMobileEndpointSecurity
script:
  commands: []
  dockerimage: demisto/sse-client:1.0.0.10133006
  script: '-'
  subtype: python3
  type: python
  longRunning: true
fromversion: 8.4.0
tests:
- No tests (auto formatted)