WithSecureEventCollector

WithSecure event collector integration for Cortex XSIAM.

Analytics & SIEM · WithSecure

Configuration parameters

  • url — Server URL (required)
  • credentials — Client ID (required)
  • first_fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
  • limit — Maximum number of events per fetch. Max 1000
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • with-secure-get-events

    Manual command used to fetch events and display them.