Cylance
Version: 2.0.0
Cylance is revolutionizing cybersecurity with AI based solutions that predict and prevent execution of advanced threats and malware at the endpoint.
Connect Cylance with LogicHub
- Navigate to Automations > Integrations.
- Search for Cylance.
- Click Details, then the + icon. Enter the required information in the following fields.
- Label: Enter a connection name.
- Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
- Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
- Remote Agent: Run this integration using the LogicHub Remote Agent.
- Tenant ID: Tenant ID in Cylance.
- APP ID: APP ID in Cylance.
- Password: Password of Cylance.
- Base URL: Base Url for Cylance (Default is 'https://protectapi.cylance.com').
- After you've entered all the details, click Connect.
Actions for Cylance
Check Computer for File
Checks if the file with a given name or hash is present on a given computer.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
---|---|---|
Computer Column name | Column name from parent table having the name of the computer. | Required |
File Column name | Column name from parent table having either name or hash of the file. | Required |
Find Computers with File
Finds computers with given file name or hash.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
---|---|---|
File Column name | Column name from parent table having either name or hash of the file. | Required |
Release Notes
v2.0.0
- Updated architecture to support IO via filesystemv1.1.0
- Added Base URL optional field for connection.v1.0.8
- Added documentation link in the automation library.
Updated about 1 year ago