SafeNet Trusted Access by Thales is an access management solution that allows organizations to centrally manage and secure access to business applications.
SafeNet Trusted Access prevents data breaches, helps with compliance with regulations, and supports migration to the cloud in a simple and secure fashion.
For information about the configuration steps, visit our Help Documentation.
| Name | Description |
|---|---|
SafeNet Trusted Access Push Reject Alert | |
SafeNet Trusted Access Account Lockout Alert |
| Name | Description |
|---|---|
| Thales SafeNet Trusted Access (Partner Contribution) | This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks. |
| Name | Description |
|---|---|
SafeNet Trusted Access – Push Reject Alert Classifier | Deprecated - Please use SafeNet Trusted Access – Alert Classifier instead. |
SafeNet Trusted Access – Alert Mapper | Maps incoming SafeNet Trusted Access alert fields. |
SafeNet Trusted Access – Push Reject Alert Mapper | Deprecated - Please use SafeNet Trusted Access – Alert Mapper instead. |
SafeNet Trusted Access – Alert Classifier | Classifies SafeNet Trusted Access alerts. |
| Name | Description |
|---|---|
SafeNet Trusted Access - Username | Username of the user. |
SafeNet Trusted Access - Remove User from Unusual Activity Group | If no option is selected, you need to remove user from the group manually. |
SafeNet Trusted Access - User in Unusual Activity Group (Hours) | The amount of time in hours for which the user remains in the Unusual Activity Group. |
SafeNet Trusted Access - Unusual Activity Group | Name of the Unusual Activity Group. |
SafeNet Trusted Access - Instance Name | Name of the SafeNet Trusted Access integration instance. |
| Name | Description |
|---|---|
| STA-FetchListContent | This script will get the Unusual Activity Group from "sta_unusual_activity_group" List. |
| STA-PostProcessing | Post processing script to remove the user from the Unusual Activity Group on Close Form. |
| Name | Description |
|---|---|
SafeNet Trusted Access - Incident Layout | SafeNet Trusted Access Alert Incident Layout |
SafeNet Trusted Access – Account Lockout Incident Layout | SafeNet Trusted Access incident layout for lockout alert. |
| Name | Description |
|---|---|
| SafeNet Trusted Access - Terminate User SSO Sessions | This playbook terminates user SSO sessions so that upon the next login attempt following the unlocking of the account, authentication is required. |
| SafeNet Trusted Access - Add to Unusual Activity Group | This playbook adds the user to a group that was created to identify unusual activity. SafeNet Trusted Access policies can be configured to take this into account and provide stronger protection when handling access events from users who are members of the group. The user is added to this group for a configurable period of time. |
| Name | Description |
|---|---|
SafeNetTrustedAccess Modeling Rule |
| Name | Description |
|---|---|
SafeNet Trusted Access Push Reject Alert | |
SafeNet Trusted Access Account Lockout Alert |
| Name | Description |
|---|---|
| Thales SafeNet Trusted Access (Partner Contribution) | This integration enables you to process alerts from SafeNet Trusted Access (STA) indicating security risks to end user accounts, and apply security remediation actions on SafeNet Trusted Access through security orchestration playbooks. |
| Thales SafeNet Trusted Access Event Collector (Partner Contribution) | Retrieve access, authentication, and audit logs and store them on a Security Information and Event Management (SIEM) system, local repository, or syslog file server. You can retrieve the logs only for the tenant that is associated with the API key, or for a direct or delegated child of that tenant. |
| Name | Description |
|---|---|
SafeNet Trusted Access – Push Reject Alert Classifier | Deprecated - Please use SafeNet Trusted Access – Alert Classifier instead. |
SafeNet Trusted Access – Alert Classifier | Classifies SafeNet Trusted Access alerts. |
SafeNet Trusted Access – Alert Mapper | Maps incoming SafeNet Trusted Access alert fields. |
SafeNet Trusted Access – Push Reject Alert Mapper | Deprecated - Please use SafeNet Trusted Access – Alert Mapper instead. |
| Name | Description |
|---|---|
SafeNet Trusted Access - Remove User from Unusual Activity Group | If no option is selected, you need to remove user from the group manually. |
SafeNet Trusted Access - User in Unusual Activity Group (Hours) | The amount of time in hours for which the user remains in the Unusual Activity Group. |
SafeNet Trusted Access - Unusual Activity Group | Name of the Unusual Activity Group. |
SafeNet Trusted Access - Instance Name | Name of the SafeNet Trusted Access integration instance. |
| Name | Description |
|---|---|
safenet_trusted_access_parsing_rule |
| Name | Description |
|---|---|
| STA-FetchListContent | This script will get the Unusual Activity Group from "sta_unusual_activity_group" List. |
| STA-PostProcessing | Post processing script to remove the user from the Unusual Activity Group on Close Form. |
| Name | Description |
|---|---|
| SafeNet Trusted Access - Terminate User SSO Sessions | This playbook terminates user SSO sessions so that upon the next login attempt following the unlocking of the account, authentication is required. |
| SafeNet Trusted Access - Add to Unusual Activity Group | This playbook adds the user to a group that was created to identify unusual activity. SafeNet Trusted Access policies can be configured to take this into account and provide stronger protection when handling access events from users who are members of the group. The user is added to this group for a configurable period of time. |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Common Types | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|---|
| Remote Access | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Active Directory Query | By: Cortex XSOAR |
| Google Maps | By: Cortex XSOAR |
| MITRE ATT&CK | By: Cortex XSOAR |
| Slack | By: Cortex XSOAR |
Added 5 commands:
Thales
| Certification | Certified | Read more |
| Supported By | Partner | |
| Created | September 9, 2021 | |
| Last Release | February 1, 2023 |
