CyberArkPAS

Use the CyberArk Privileged Access Management (PAM) solution to manage users, safes, vaults, and accounts from Cortex XSOAR.

Category

Authentication & Identity Management

Pack

CyberArkPAS

Configuration parameters

• url — Server URL (e.g., https://example.net) (required)
• credentials — Username (required)
• isFetch — Fetch incidents
• max_fetch — Max fetch
• fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
• score — CyberArk PAM score (0.0-100.0)
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (26)

• cyberark-pas-account-add — Add a new privileged account or SSH key to the vault.
• cyberark-pas-account-delete — Delete a specific account in the vault.
• cyberark-pas-account-get-details — Returns information for the specified account, identified by the account ID.
• cyberark-pas-account-get-list-activity — Returns the activities of a specific account that is identified by its account ID.
• cyberark-pas-account-update — Update the details of an existing account.
• cyberark-pas-accounts-list — Return a list of all the accounts in the vault.
• cyberark-pas-credentials-change-in-vault-only — Enable users to set account credentials and change them in the vault.
• cyberark-pas-credentials-change-random-password — Mark an account for an immediate credentials change by the CPM to a new random value.
• cyberark-pas-credentials-change-set-new-password — Enable users to set the account's credentials to use for the next Central Policy Manager (CPM) change.
• cyberark-pas-credentials-reconcile — Mark an account for automatic reconciliation by the Central Policy Manager (CPM).
• cyberark-pas-credentials-verify — Mark an account for verification by the Central Policy Manager (CPM).
• cyberark-pas-safe-add — Add a new safe to the vault.
• cyberark-pas-safe-delete — Delete a safe from the vault.
• cyberark-pas-safe-get-by-name — Return information about a specific safe in the vault.
• cyberark-pas-safe-member-add — Add an existing user as a safe member.
• cyberark-pas-safe-member-delete — Remove a specific member from a safe.
• cyberark-pas-safe-member-update — Update an existing safe member.
• cyberark-pas-safe-members-list — Return a list of the members of the safe.
• cyberark-pas-safe-update — Update a single safe in the vault.
• cyberark-pas-safes-list — Return information about all of the user’s safes in the vault.
• cyberark-pas-security-events-get — Return all Privileged Threat Analytics (PTA) security events.
• cyberark-pas-user-activate — Activate an existing vault user who was suspended after entering incorrect credentials multiple times.
• cyberark-pas-user-add — Add a new user to the vault.
• cyberark-pas-user-delete — Delete a specific user in the vault.
• cyberark-pas-user-update — Update an existing vault user.
• cyberark-pas-users-list — Return a list of all existing users in the vault that meet the filter and search criteria.