VaronisDataSecurityPlatform

Streamline alerts and related forensic information from Varonis DSP.

Analytics & SIEM · Varonis Data Security Platform

Configuration parameters

  • isFetch — Fetch incidents
  • incidentType — Incident type
  • url — The FQDN/IP the integration should connect to (required)
  • credentials — Name of Varonis user (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)
  • max_fetch — Maximum number of incidents per fetch
  • first_fetch — First fetch time
  • severity — Minimum severity of alerts to fetch
  • threat_model — Varonis threat model name
  • status — Varonis alert status

Commands (4)

  • varonis-close-alert

    Close the alert.

  • varonis-get-alerted-events

    Get events applied to specific alerts.

  • varonis-get-alerts

    Get alerts from Varonis DA.

  • varonis-update-alert-status

    Update alert status.