WithSecureEventCollector

WithSecure event collector integration for Cortex XSIAM.

Category

Analytics & SIEM

Pack

WithSecure

Configuration parameters

• url — Server URL (required)
• credentials — Client ID (required)
• first_fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days, 3 months, 1 year)
• limit — Maximum number of events per fetch. Max 1000
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (1)

• with-secure-get-events — Manual command used to fetch events and display them.