Skip to content

Commit

Permalink
Merge pull request #1748 from lvoloshyn-sekoia/feat/add_docs_for_ubik…
Browse files Browse the repository at this point in the history
…a_cloud_protector

Add docs for Ubika Cloud Protector
  • Loading branch information
squioc authored Apr 22, 2024
2 parents 0a2c725 + b8ec185 commit 627f724
Show file tree
Hide file tree
Showing 6 changed files with 68 additions and 0 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
uuid: d0383e87-e054-4a21-8a2c-6a89635d8615
name: Ubika Cloud Protector
type: intake

## Overview

Ubika Cloud Protector is a cloud-native security solution, providing advanced threat detection and data protection to secure cloud environments, enabling real-time monitoring and mitigation of risks in cloud-based infrastructures.

!!! warning
Important note - This format is currently in beta. We highly value your feedback to improve its performance.

{!_shared_content/operations_center/detection/generated/suggested_rules_d0383e87-e054-4a21-8a2c-6a89635d8615_do_not_edit_manually.md!}

{!_shared_content/operations_center/integrations/generated/d0383e87-e054-4a21-8a2c-6a89635d8615.md!}

## Configure

### How to create an API token

!!! warning
The following instructions are based on the old interface of Ubika Cloud Protector. Please, switch to the old interface if you use the new one.
![choose old interfaces](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/switch.png){: style="max-width:100%"}

To create an API token:


1. Log in the Ubika Cloud protector
2. Go to `Account` > `API Access`

![api access](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/api_access.png){: style="max-width:100%"}

3. In the `API KEYS INFO` section, please note the `provider name` and the `tenant name`

![api info](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/api_keys_info.png){: style="max-width:100%"}

4. In the `CREATE API KEYS` section
1. Type a description to identify the API token
2. Select the `AUTHZ_ROLE_TENANT` role
3. Select the `AUTHZ_ACT_LIST_LOGS` action
4. Click `CREATE`

![create_token](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/create_api_token.png){: style="max-width:100%"}


### Create your intake

1. Go to the [intake page](https://app.sekoia.io/operations/intakes) and create a new intake from the `Ubika Cloud Protector`.
2. Copy the associated Intake key

### Pull the logs to collect them on Sekoia.io

Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), and follow these steps:

- Click on **+ PLAYBOOK** button to create a new one
- Select **Create a playbook from scratch**
- Give it a name in the field **Name**
- Open the left panel, click **Ubika** then select the trigger `Fetch new alerts from Ubika Cloud Protector`
- Click on **Create**
- Create a **Trigger configuration** using:

* Type the `Intake key` created on the previous step
* Type the `provider`, `tenant` and `token` from the `How to create an API token` step

- Click on the **Save** button
- **Activate the playbook** with the toggle button on the top right corner of the page

### Enjoy your events on the [Events page](https://app.sekoia.io/operations/events)
1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,7 @@ nav:
- Salesforce: xdr/features/collect/integrations/cloud_and_saas/salesforce.md
- SecurityScorecard's Vulnerability Assessment Scanner: xdr/features/collect/integrations/cloud_and_saas/securityscorecard_vas.md
- Sophos Threat Analysis Center: xdr/features/collect/integrations/cloud_and_saas/sophos_threat_analysis_center.md
- Ubika Cloud Protector: xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector.md
- Ubika WAAP Gateway: xdr/features/collect/integrations/cloud_and_saas/ubika_waap.md
- Zscaler ZIA: xdr/features/collect/integrations/cloud_and_saas/zscaler_zia.md
- Email:
Expand Down

0 comments on commit 627f724

Please sign in to comment.