Dell Secureworks

Provides access to the Secureworks CTP ticketing system.

Category

Case Management

Pack

SecureWorks

Configuration parameters

• server — Server URL (e.g. https://api.secureworks.com) (required)
• credentials — Username (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetch — Fetch incidents
• ticketType — Fetch tickets of this ticket type
• groupingType — Limit tickets to one of REQUEST, CHANGE, HEALTH or SECURITY
• status — Fetch tickets by status(comma separated): New,Active,Queued,Pending,Resolved
• worklogs — Whether to return worklogs - If "ALL," all worklogs are returned for each ticket. If "UPDATED", all worklogs added since last acknowledgement are returned. If "NONE," the path returns no worklogs. Default is "ALL."
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• attachments — Whether to get attachments for the fetched tickets

Commands (10)

• secure-works-add-worklogs-ticket — Add worklog to a ticket
• secure-works-assign-ticket — Assign a ticket to the Secureworks Security Operations Center (SOC)
• secure-works-close-ticket — Close a ticket
• secure-works-create-ticket — Create a new ticket
• secure-works-get-close-codes — Returns a list of close codes for a ticket
• secure-works-get-ticket — Get the details of a specific ticket, by ID
• secure-works-get-ticket-count — Retrieve a count of tickets that have been updated and not yet acknowledged
• secure-works-get-tickets-ids — Get a list of ticket IDs in the same order as the tickets returned by the GET /tickets/updates command.
• secure-works-get-tickets-updates — Retrieves tickets from 24 hours prior to when the updates command is executed. If a limit is specified, it will retrieve up to that many tickets (max is 500 tickets). Tickets must be updated within the last 24 hours to be visible in the command results. When executing this command you also receive the ticket worklogs. In order to view the attachment information of a specific ticket, you must use the get-ticket command. This command will return the list of attachments available for that particular ticket. Use acknowledge to confirm the updates.
• secure-works-update-ticket — Update an existing ticket