Salesforce v2.1.24

CRM Services

Author:
Cortex XSOAR
Support:
xsoar
URL:
https://www.paloaltonetworks.com/cortex
Default data source:
Salesforce
agentixxsiamEDRcloudcloud_runtime_security
Case Management

Classifiers (2)

Integrations (3)

Modeling rules (3)

Parsing rules (1)

Scripts (3)

README

Overview

This pack includes Cortex XSIAM content.
Salesforce is a company that makes cloud-based software designed to help businesses find more prospects, close more deals, and wow customers with amazing service.

<~XSIAM>

This pack includes

Data normalization capabilities:

  • Rules for parsing and modeling Salesforce logs that are ingested via the event collector into Cortex XSIAM.

Supported timestamp formats

  • %Y-%m-%dT%H:%M:%E3SZ: Supported UTC format for Event Log File and Login events.
  • %Y-%m-%dT%H:%M:%E3S%Z: Supported time zone (+HHMM or -HHMM) for audit events.
  • %Y-%m-%dT%H:%M:%E3SZ: Supported UTC format for Salesforce Realtime event collector.

Data Collection

The Cortex XSIAM data collector can collect Audit Trail and Security Monitoring event logs from Salesforce.com.

To configure the collector for Salesforce, follow the XDR documentation here.
</~XSIAM>