SafeNet Trusted Access
This pack includes Cortex XSIAM content.
SafeNet Trusted Access prevents data breaches, helps with compliance with regulations, and supports migration to the cloud in a simple and secure fashion.
SafeNet Trusted Access by Thales is an access management solution that allows organizations to centrally manage and secure access to business applications.
This pack includes Cortex XSIAM content.
SafeNet Trusted Access prevents data breaches, helps with compliance with regulations, and supports migration to the cloud in a simple and secure fashion.
This pack includes Cortex XSIAM content.
SafeNet Trusted Access prevents data breaches, helps with compliance with regulations, and supports migration to the cloud in a simple and secure fashion.
For information about the configuration steps, visit our Help Documentation.
Name | Description |
---|---|
STA-FetchListContent | This script will get the Unusual Activity Group from "sta_unusual_activity_group" List. |
STA-PostProcessing | Post processing script to remove the user from the Unusual Activity Group on Close Form. |
Name | Description |
---|---|
SafeNet Trusted Access โ Alert Classifier | Classifies SafeNet Trusted Access alerts. |
SafeNet Trusted Access โ Push Reject Alert Classifier | Deprecated - Please use SafeNet Trusted Access โ Alert Classifier instead. |
SafeNet Trusted Access โ Push Reject Alert Mapper | Deprecated - Please use SafeNet Trusted Access โ Alert Mapper instead. |
SafeNet Trusted Access โ Alert Mapper | Maps incoming SafeNet Trusted Access alert fields. |
Name | Description |
---|---|
SafeNet Trusted Access - Remove User from Unusual Activity Group | If no option is selected, you need to remove user from the group manually. |
SafeNet Trusted Access - Unusual Activity Group | Name of the Unusual Activity Group. |
SafeNet Trusted Access - Instance Name | Name of the SafeNet Trusted Access integration instance. |
SafeNet Trusted Access - Username | Username of the user. |
SafeNet Trusted Access - User in Unusual Activity Group (Hours) | The amount of time in hours for which the user remains in the Unusual Activity Group. |
Name | Description |
---|---|
SafeNet Trusted Access Push Reject Alert | |
SafeNet Trusted Access Account Lockout Alert |
Name | Description |
---|---|
Thales SafeNet Trusted Access (Partner Contribution) | This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks. |
Name | Description |
---|---|
SafeNet Trusted Access โ Account Lockout Incident Layout | SafeNet Trusted Access incident layout for lockout alert. |
SafeNet Trusted Access - Incident Layout | SafeNet Trusted Access Alert Incident Layout |
Name | Description |
---|---|
SafeNet Trusted Access - Add to Unusual Activity Group | This playbook adds the user to a group that was created to identify unusual activity. SafeNet Trusted Access policies can be configured to take this into account and provide stronger protection when handling access events from users who are members of the group. The user is added to this group for a configurable period of time. |
SafeNet Trusted Access - Terminate User SSO Sessions | This playbook terminates user SSO sessions so that upon the next login attempt following the unlocking of the account, authentication is required. |
Name | Description |
---|---|
STA-FetchListContent | This script will get the Unusual Activity Group from "sta_unusual_activity_group" List. |
STA-PostProcessing | Post processing script to remove the user from the Unusual Activity Group on Close Form. |
Name | Description |
---|---|
SafeNet Trusted Access โ Alert Classifier | Classifies SafeNet Trusted Access alerts. |
SafeNet Trusted Access โ Push Reject Alert Classifier | Deprecated - Please use SafeNet Trusted Access โ Alert Classifier instead. |
SafeNet Trusted Access โ Push Reject Alert Mapper | Deprecated - Please use SafeNet Trusted Access โ Alert Mapper instead. |
SafeNet Trusted Access โ Alert Mapper | Maps incoming SafeNet Trusted Access alert fields. |
Name | Description |
---|---|
SafeNet Trusted Access - User in Unusual Activity Group (Hours) | The amount of time in hours for which the user remains in the Unusual Activity Group. |
SafeNet Trusted Access - Remove User from Unusual Activity Group | If no option is selected, you need to remove user from the group manually. |
SafeNet Trusted Access - Unusual Activity Group | Name of the Unusual Activity Group. |
SafeNet Trusted Access - Instance Name | Name of the SafeNet Trusted Access integration instance. |
Name | Description |
---|---|
SafeNet Trusted Access Account Lockout Alert | |
SafeNet Trusted Access Push Reject Alert |
Name | Description |
---|---|
Thales SafeNet Trusted Access Event Collector | Retrieve access, authentication, and audit logs and store them on a Security Information and Event Management (SIEM) system, local repository, or syslog file server. You can retrieve the logs only for the tenant that is associated with the API key, or for a direct or delegated child of that tenant. |
Thales SafeNet Trusted Access (Partner Contribution) | This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks. |
Name | Description |
---|---|
SafeNetTrustedAccess Modeling Rule |
Name | Description |
---|---|
safenet_trusted_access_parsing_rule |
Name | Description |
---|---|
SafeNet Trusted Access - Add to Unusual Activity Group | This playbook adds the user to a group that was created to identify unusual activity. SafeNet Trusted Access policies can be configured to take this into account and provide stronger protection when handling access events from users who are members of the group. The user is added to this group for a configurable period of time. |
SafeNet Trusted Access - Terminate User SSO Sessions | This playbook terminates user SSO sessions so that upon the next login attempt following the unlocking of the account, authentication is required. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Common Scripts | By: Cortex XSOAR |
Common Types | By: Cortex XSOAR |
Pack Name | Pack By |
---|
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Common Scripts | By: Cortex XSOAR |
Common Types | By: Cortex XSOAR |
Cortex REST API | By: Cortex XSOAR |
Added 5 commands:
Certification | Certified | Read more |
Supported By | Partner | |
Created | September 9, 2021 | |
Last Release | December 4, 2024 |