SupernaZeroTrust

Details

ID	`SupernaZeroTrust`
Category	Utilities
From Version	8.9.0
Docker Image	`demisto/python3:3.12.13.10116658`

README

Superna Zero Trust

Integrates Cortex XSOAR with Superna Zero Trust to automate ransomware containment and recovery actions via the Superna SERA API.

Configure Superna Zero Trust on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services
Search for Superna Zero Trust
Click Add instance and configure the following parameters:

Parameter	Description	Required
API URL	Base URL of your Superna Zero Trust / SERA server (e.g. `https://sera.example.local`)	True
API Key	API key for authenticating to the Superna SERA API	True
Trust any certificate (not secure)	Skip TLS certificate verification. Enable only for self-signed certificates.	False
Use system proxy settings	Route API calls through the system proxy	False

Click Test to validate connectivity.

Commands

superna-zt-snapshot-critical-paths

Create a snapshot of Superna critical paths for ransomware rapid recovery.

Base Command

superna-zt-snapshot-critical-paths

Input

There are no input arguments for this command.

Context Output

Path	Type	Description
SupernaZeroTrust.Snapshot.Status	String	Result status: `Success` or `AlreadyExists`
SupernaZeroTrust.Snapshot.Message	String	Human-readable result message
SupernaZeroTrust.Snapshot.Result	Unknown	Raw API response from the snapshot operation

Command Example

!superna-zt-snapshot-critical-paths

Human Readable Output

✅ Snapshot created successfully

superna-zt-lockout-user

Lock out a user from NAS storage access.

Base Command

superna-zt-lockout-user

Input

Argument Name	Description	Required
username	The username to lock out from NAS storage access	Required

Context Output

Path	Type	Description
SupernaZeroTrust.Lockout.Username	String	The username that was locked out
SupernaZeroTrust.Lockout.Result	Unknown	Raw API response from the lockout operation

Command Example

!superna-zt-lockout-user username="jsmith"

superna-zt-unlock-user

Unlock a user from NAS storage access.

Base Command

superna-zt-unlock-user

Input

Argument Name	Description	Required
username	The username to unlock from NAS storage access	Required

Context Output

Path	Type	Description
SupernaZeroTrust.Unlock.Username	String	The username that was unlocked
SupernaZeroTrust.Unlock.Result	Unknown	Raw API response from the unlock operation

Command Example

!superna-zt-unlock-user username="jsmith"

Configuration parameters

base_url — API URL (e.g. https://sera.example.local) (required)
credentials — (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (3)

superna-zt-lockout-user
Lock out a user from NAS storage access.
superna-zt-snapshot-critical-paths
Create a snapshot of Superna critical paths for ransomware rapid recovery.
superna-zt-unlock-user
Unlock a user from NAS storage access.

Source

SupernaZeroTrust.py SupernaZeroTrust_test.py SupernaZeroTrust.yml SupernaZeroTrust_description.md

Download History Raw

commonfields:
  id: SupernaZeroTrust
  version: -1
name: SupernaZeroTrust
display: Superna Zero Trust
category: Utilities
description: Run Superna Zero Trust ransomware containment actions (critical path snapshot, user lockout/unlock) via the Superna API.
configuration:
- display: API URL (e.g. https://sera.example.local)
  name: base_url
  type: 0
  required: true
  section: Connect
- displaypassword: API Key
  name: credentials
  type: 9
  required: true
  hiddenusername: true
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  defaultvalue: "false"
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  defaultvalue: "false"
  section: Connect
script:
  script: "-"
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10116658
  commands:
  - name: superna-zt-snapshot-critical-paths
    description: Create a snapshot of Superna critical paths for ransomware rapid recovery.
    outputs:
    - contextPath: SupernaZeroTrust.Snapshot.Result
      description: API response from snapshot operation.
      type: Unknown
  - name: superna-zt-lockout-user
    description: Lock out a user from NAS storage access.
    arguments:
    - name: username
      required: true
      description: Username to lock out.
    outputs:
    - contextPath: SupernaZeroTrust.Lockout.Result
      description: API response from lockout operation.
      type: Unknown
  - name: superna-zt-unlock-user
    description: Unlock a user from NAS storage access.
    arguments:
    - name: username
      required: true
      description: Username to unlock.
    outputs:
    - contextPath: SupernaZeroTrust.Unlock.Result
      description: API response from unlock operation.
      type: Unknown
sectionorder:
- Connect
fromversion: 8.9.0
tests:
- No tests