Salesforce (v2.2.1)
CRM Services
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Default data source
- Salesforce
- Categories
- Case Management
Integrations (3)
- Salesforce
- Salesforce Event Collector (Deprecated)
- Salesforce IAM
Modeling rules (1)
- Salesforce Modeling Rule
Parsing rules (1)
- Salesforce Parsing Rule
Scripts (3)
- SalesforceAskUser
- generate_profile_id
- generate_timezonesidkey
README
Overview
This pack includes Cortex XSIAM content.
Salesforce is a company that makes cloud-based software designed to help businesses find more prospects, close more deals, and wow customers with amazing service.
<~XSIAM>
This pack includes
Data normalization capabilities:
- Rules for parsing and modeling Salesforce logs that are ingested via the event collector into Cortex XSIAM.
Supported timestamp formats
%Y-%m-%dT%H:%M:%E3SZ: Supported UTC format for Event Log File and Login events.%Y-%m-%dT%H:%M:%E3S%Z: Supported time zone (+HHMM or -HHMM) for audit events.%Y-%m-%dT%H:%M:%E3SZ: Supported UTC format for Salesforce Realtime event collector.
Data Collection
The Cortex XSIAM data collector can collect Audit Trail and Security Monitoring event logs from Salesforce.com.
To configure the collector for Salesforce, follow the XDR documentation here.
</~XSIAM>