TeamViewer Event Collector

Details

ID	`TeamViewer Event Collector`
Provider	TeamViewer
Category	Analytics & SIEM
From Version	6.8.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	XSIAM

README

TeamViewer event collector integration for Cortex XSIAM.
This integration was integrated and tested with version 15.40 of TeamViewer.
User access token scope: Event logging - Allow requesting all event logs.
A Tensor license is required.

Configure TeamViewer Event Collector in Cortex

Parameter	Description	Required
Your server URL		True
Script Token	The script token to use for connection	True
Trust any certificate (not secure)		False
Use system proxy settings		False
First fetch time		False
The maximum number of alerts per fetch		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

teamviewer-get-events

Gets events from TeamViewer.

Base Command

teamviewer-get-events

Input

Argument Name	Description	Required
should_push_events	If true, the command will create events, otherwise it will only display them. Possible values are: true, false. Default is false.	Required
limit	Maximum number of results to return.	Optional

Context Output

There is no context output for this command.

Configuration parameters

url — Server URL (required)
credentials — (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
first_fetch — First fetch time (<number> <time unit>, e.g., 12 hours, 7 days) - within the last 12 months. Recommended time is 3 days.
max_fetch — The maximum number of alerts per fetch

Commands (1)

teamviewer-get-events
Gets events from TeamViewer.

Source

TeamViewerEventCollector.py TeamViewerEventCollector_test.py TeamViewerEventCollector.yml TeamViewerEventCollector_description.md

Download History Raw

category: Analytics & SIEM
provider: TeamViewer
commonfields:
  id: TeamViewer Event Collector
  version: -1
configuration:
- defaultvalue: https://webapi.teamviewer.com
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- displaypassword: Script Token
  additionalinfo: The script token to use for connection
  name: credentials
  required: true
  hiddenusername: true
  type: 9
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  required: false
- defaultvalue: 3 days
  display: First fetch time (<number> <time unit>, e.g., 12 hours, 7 days) - within the last 12 months. Recommended time is 3 days.
  name: first_fetch
  type: 0
  section: Collect
  required: false
- defaultvalue: '300'
  display: The maximum number of alerts per fetch
  name: max_fetch
  type: 0
  section: Collect
  required: false
description: TeamViewer event collector integration for Cortex XSIAM.
display: TeamViewer Event Collector
name: TeamViewer Event Collector
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      defaultValue: 'false'
      description: If true, the command will create events, otherwise it will only display them.
      name: should_push_events
      predefined:
      - 'true'
      - 'false'
      required: true
    - description: Maximum number of results to return.
      name: limit
    description: Gets events from TeamViewer.
    name: teamviewer-get-events
  dockerimage: demisto/python3:3.12.13.10116658
  isfetchevents: true
  script: '-'
  subtype: python3
  type: python
marketplaces:
- marketplacev2
- platform
fromversion: 6.8.0
tests:
- No tests (auto formatted)
supportedModules:
- xsiam