RedLock

Deprecated. Use the Prisma Cloud v2 integration instead.

Category

Network Security

Pack

PrismaCloud

Configuration parameters

• url — Server URL (required)
• credentials — Username (required)
• customer — Customer name
• isFetch — Fetch incidents
• incidentType — Incident type
• ruleName — Fetch only incidents matching this rule name
• policyName — Fetch only incidents matching this policy name
• policySeverity — Fetch only incidents with this severity
• fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
• proxy — Use system proxy settings
• unsecure — Trust any certificate (not secure)

Commands (13)

• redlock-dismiss-alerts — Dismiss the alerts matching the given filter. Must provide either policy IDs or alert IDs.
• redlock-get-alert-details — Gets the details of an alert based on alert ID
• redlock-get-remediation-details — Gets remediation details for the given alert.
• redlock-get-rql-response — Returns the results of an RQL config query.
• redlock-get-scan-results — Returns scan result details for the completed scan that has the specified scan ID
• redlock-get-scan-status — Returns the status of the asynchronous IaC scan job that has the specified scan ID.
• redlock-list-alert-filters — List the acceptable filters and values for alerts
• redlock-list-scans — Returns a list of IaC scans that meet the given conditions.
• redlock-reopen-alerts — Re-open the alerts matching the given filter. Must provide either policy IDs or alert IDs.
• redlock-search-alerts — Search alerts on the Prisma Cloud (RedLock) platform. If no time-range arguments are given, the search will filter only alerts from the last 7 days.
• redlock-search-config — Search configuration inventory on the Prisma Cloud (RedLock) platform using RQL language.
• redlock-search-event — Search events on the Prisma Cloud (RedLock) platform using RQL language.
• redlock-search-network — Search networks on the Prisma Cloud (RedLock) platform using RQL language.