Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complete CyberArk IAM/Secrets Manager Adoption #30257

Merged
merged 10 commits into from
Oct 22, 2023
Merged
Show file tree
Hide file tree
Changes from 8 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 5 additions & 6 deletions Packs/Vectra_AI/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ Learn more at [Vectra Website](https://www.vectra.ai).

This pack is designed to quickly integrate with Vectra Detect platform to detect and analyze malicious attacks in progress by creating incident based on Accounts, Hosts or Detections. It gives security engineers visibility into advanced threats to speed detection and remediation response times.

<~XSIAM>This pack includes Cortex XSIAM content.</~XSIAM>


## What does this pack do?

Expand All @@ -27,10 +27,9 @@ To get up and running with this pack, you must have a valid API token on your Ve

Be sure that the user has a role with sufficient permissions to do all the actions.

<~XSIAM>
## Collect Events from Vendor
### REST API
### Pack Contributors:

The integration uses the 2.2 API version of `detections` and `audits` endpoints to collect events.
---
- DUDA Olivier

</~XSIAM>
Contributions are welcome and appreciated. For more info, visit our [Contribution Guide](https://xsoar.pan.dev/docs/contributing/contributing).
1 change: 1 addition & 0 deletions Packs/cyberark_AIM/.secrets-ignore
Original file line number Diff line number Diff line change
@@ -1 +1,2 @@
https://docs.cyberark.com
https://cyberark.my.site.com
Binary file added Packs/cyberark_AIM/Author_image.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
18 changes: 17 additions & 1 deletion Packs/cyberark_AIM/README.md
Original file line number Diff line number Diff line change
@@ -1 +1,17 @@
Note: Support for this Pack will be moved to the Partner on April, 10, 2023.
The integration between Palo Alto Networks Cortex XSOAR and CyberArk enables Cortex XSOAR to securely pull privileged credentials from the CyberArk Vault using CyberArk’s Secrets Manager.

This eliminates the need for Cortex XSOAR to store or embed these credentials within their solution and the need for customers to rotate these credentials within Cortex XSOAR.

The integration helps ensure that privileged credentials are secured in the Vault, rotated to meet company guidelines, and meet complexity requirements.

The CyberArk Credential Provider can be used for managing privileged credentials from both Palo Alto XSOAR and XSIAM. By doing this, XSOAR and XSIAM can securely retrieve privileged credentials from the CyberArk Vault.

<b><h3> Use Cases &amp; Benefits</h3></b>
<b><h4> Manage, rotate and secure secrets used by XSOAR and XSIAM:</h4></b>

* High performance: Meets the needs of the enterprise’s most mission critical and demanding applications.
* Strong authentication: Verifies the origin of any application requesting the credential.
* No downtime: Rotates credentials based on policy while applications keep running.

### Getting Started:
To get started, please visit: https://cyberark.my.site.com/mplace/s/#a352J000000GHFRQA4-a392J000002eLq3QAE
14 changes: 7 additions & 7 deletions Packs/cyberark_AIM/pack_metadata.json
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
{
"name": "CyberArk AIM",
"description": "Query CyberArk Application Identity Manager for accounts and credentials",
"support": "xsoar",
"description": "Securely pull hard-coded and embedded privileged credentials from the CyberArk Vault using CyberArk Secrets Manager.",
"support": "partner",
"currentVersion": "1.0.14",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
"author": "CyberArk",
"url": "https://www.cyberark.com/products/secrets-management/",
"email": "https://www.cyberark.com/services-support/technical-support-contact/",
"created": "2020-04-14T00:00:00Z",
"categories": [
"Authentication & Identity Management"
],
"tags": [],
"useCases": [],
"keywords": [],
"useCases": ["Identity and Access Management"],
"keywords": ["identity", "secrets", "vault", "credentials"],
"marketplaces": [
"xsoar",
"marketplacev2"
Expand Down
Loading