WithSecure

Interact with WithSecure Elements

Configuration

Name	Type	Description
client_id	string	Client identifier
secret	string	API secret to authenticate

Triggers

Fetch security events [beta]

Get last security events

Arguments

Name	Type	Description
intake_server	string	Server of the intake server (e.g. 'https://intake.sekoia.io')
intake_key	string	Intake key to use when sending events

Actions

Isolate Device From Network

Isolate a device from network connections.

Arguments

Name	Type	Description
target	string	Device identifier of the computer to isolate.
message	string	Optional message that is displayed on isolated device.

List devices

Retrieves devices details.

Arguments

Name	Type	Description
organization_id	string	UUID of an organization. If organizationId is missing, default organization of authenticated client is used.

Outputs

Name	Type	Description
devices	array

Release Device From Network Isolation

Release a device from network isolation.

Arguments

Name	Type	Description
target	string	Device identifier of the computer to release.

Extra

Module WithSecure v2.3