RunZero Event Collector

This is the RunZero event collector integration for XSIAM.

Category

Analytics & SIEM

Pack

RunZero

Configuration parameters

• url — Server URL (required)
• client_id — Client ID (required)
• client_secret — (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetch — Fetch incidents
• max_fetch — Max events per fetch
• first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)

Commands (1)

• runzero-get-events — Gets events from RunZero.