RSA Archer v2

The RSA Archer GRC platform provides a common foundation for managing policies, controls, risks, assessments, and deficiencies across lines of business.

Category

Case Management

Pack

ArcherRSA

Configuration parameters

• url — Server URL (required)
• api_endpoint — API Endpoint
• instanceName — Instance name (required)
• credentials — Username (required)
• userDomain — User domain
• isFetch — Fetch incidents
• incidentType — Incident type
• applicationId — Application ID for fetch (required)
• applicationDateField — Application date field for fetch (required)
• fetch_limit — Maximum number of incidents to pull per fetch
• fetch_time — First fetch timestamp
• fields_to_fetch — List of fields from the application to get into the incident
• fetch_xml — XML for fetch filtering
• timeout — Timeout
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• incidentFetchInterval — Incidents Fetch Interval

Commands (19)

• archer-create-record — Creates a new content record in the given application.
• archer-delete-record — Deletes an existing content record in the given application.
• archer-execute-statistic-search-by-report — Performs a statistic search by report GUID.
• archer-get-application-fields — Gets all application fields by application ID.
• archer-get-field — Returns a mapping from list value name to list value ID.
• archer-get-file — Downloads a file from Archer to Cortex XSOAR context.
• archer-get-mapping-by-level — Returns a mapping of fields by level ID.
• archer-get-record — Gets information about a content record in the given application.
• archer-get-reports — Gets all reports from Archer.
• archer-get-search-options-by-guid — Returns search criteria by report GUID.
• archer-get-valuelist — Returns a list of values for a specified field, for example, fieldID=16114. This command is applicable only to value list fields (type 4) and will attempt to fetch the list from the internal integration instance cache. To ensure an up-to-date response, execute the `archer-reset-cache` command beforehand to clear the cache and force a new request to the API.
• archer-list-users — Gets details for a user or a list of all users.
• archer-print-cache — Prints the Archer's integration cache.
• archer-reset-cache — Resets Archer's integration cache. Run this command if you change the fields of your Archer application.
• archer-search-applications — Gets application details or a list of all applications.
• archer-search-records — Searches for records in the given application.
• archer-search-records-by-report — Searches records by report GUID.
• archer-update-record — Updates an existing content record in the given application.
• archer-upload-file — Uploads a file to Archer.