BloodHoundEnterprise
Deprecated. Use the SpecterOps BloodHound Enterprise integration instead. Use this integration to fetch audit logs from BloodHound Enterprise as events in Cortex XSIAM.
- Category
- Analytics & SIEM
- Pack
- BloodHoundEnterprise
Configuration parameters
- server_url — Server URL (e.g., https://example.bloodhoundenterprise.io) (required)
- client — API Token ID (required)
- max_events_per_fetch — Maximum number of events per fetch
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
Commands (1)
- bloodhound-get-events — Gets events from BloodHound Enterprise.