VaronisSaaS
Streamline alerts and related forensic information from Varonis SaaS.
Analytics & SIEM · Varonis SaaS
Configuration parameters
isFetch— Fetch incidentsincidentType— Incident typeurl— The FQDN/IP the integration should connect to (required)apiKey— (required)proxy— Use system proxy settingsinsecure— Trust any certificate (not secure)max_fetch— Maximum number of incidents per fetchfirst_fetch— First fetch timeseverity— Minimum severity of alerts to fetchthreat_model— Varonis threat model namestatus— Varonis alert statusmirror_direction— Incident Mirroring Direction
Commands (8)
-
get-mapping-fieldsReturns the list of fields to map in outgoing mirroring. This command is only used for debugging purposes.
-
update-remote-systemUpdates the remote incident with local incident changes. This method is only used for debugging purposes and will not update the current incident.
-
varonis-alert-add-noteAdd note to alerts.
-
varonis-close-alertClose the alert.
-
varonis-get-alerted-eventsGet events applied to specific alerts.
-
varonis-get-alertsGet alerts from Varonis DA.
-
varonis-get-threat-modelsGet Varonis threat models.
-
varonis-update-alert-statusUpdate alert status.