Merge pull request #1759 from lvoloshyn-sekoia/feat/add_ubika_cloud_p…

…rotector_traffic_docs

Add docs for Ubika Cloud Protector Traffic

docs/xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_alerts.md

@@ -1,5 +1,5 @@
 uuid: d0383e87-e054-4a21-8a2c-6a89635d8615
-name: Ubika Cloud Protector
+name: Ubika Cloud Protector Alerts
 type: intake
 
 ## Overview

docs/xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_traffic.md

@@ -0,0 +1,60 @@
+uuid: 8d024a2b-3627-4909-818d-26e1e3b2409c
+name: Ubika Cloud Protector Traffic
+type: intake
+
+## Overview
+
+Ubika Cloud Protector is a cloud-native security solution, providing advanced threat detection and data protection to secure cloud environments, enabling real-time monitoring and mitigation of risks in cloud-based infrastructures.
+
+!!! warning
+    Important note - This format is currently in beta. We highly value your feedback to improve its performance.
+
+{!_shared_content/operations_center/detection/generated/suggested_rules_8d024a2b-3627-4909-818d-26e1e3b2409c_do_not_edit_manually.md!}
+
+{!_shared_content/operations_center/integrations/generated/8d024a2b-3627-4909-818d-26e1e3b2409c.md!}
+
+## Configure
+
+### How to get API keys info
+
+!!! warning
+    The following instructions are based on the old interface of Ubika Cloud Protector. Please, switch to the old interface if you use the new one.
+    ![choose old interfaces](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/switch.png){: style="max-width:100%"}
+
+To get API keys info:
+
+
+1. Log in the Ubika Cloud protector
+2. Go to `Account` > `API Access`
+
+    ![api access](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/api_access.png){: style="max-width:100%"}
+
+3. In the `API KEYS INFO` section, please note the `provider name` and the `tenant name`
+
+    ![api info](/assets/operation_center/integration_catalog/cloud_and_saas/ubika_cloud_protector/api_keys_info.png){: style="max-width:100%"}
+
+4. The documentation to retrieve the `token` is still [under construction]
+
+### Create your intake
+
+1. Go to the [intake page](https://app.sekoia.io/operations/intakes) and create a new intake from the `Ubika Cloud Protector`.
+2. Copy the associated Intake key
+
+### Pull the logs to collect them on Sekoia.io
+
+Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), and follow these steps:
+
+- Click on **+ PLAYBOOK** button to create a new one
+- Select **Create a playbook from scratch**
+- Give it a name in the field **Name**
+- Open the left panel, click **Ubika** then select the trigger `Fetch new traffic events from Ubika Cloud Protector`
+- Click on **Create**
+- Create a **Trigger configuration** using:
+
+    * Type the `Intake key` created on the previous step
+    * Type the `provider`, `tenant` and `token` from the `How to get API keys info` step 
+
+- Click on the **Save** button
+- **Activate the playbook** with the toggle button on the top right corner of the page
+
+### Enjoy your events on the [Events page](https://app.sekoia.io/operations/events)

mkdocs.yml

@@ -159,8 +159,10 @@ nav:
           - Salesforce: xdr/features/collect/integrations/cloud_and_saas/salesforce.md
           - SecurityScorecard's Vulnerability Assessment Scanner: xdr/features/collect/integrations/cloud_and_saas/securityscorecard_vas.md
           - Sophos Threat Analysis Center: xdr/features/collect/integrations/cloud_and_saas/sophos_threat_analysis_center.md
-          - Ubika Cloud Protector Alerts: xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_alerts.md
-          - Ubika WAAP Gateway: xdr/features/collect/integrations/cloud_and_saas/ubika_waap.md
+          - Ubika:
+            - Ubika Cloud Protector Alerts: xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_alerts.md
+            - Ubika Cloud Protector Traffic: xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_traffic.md
+            - Ubika WAAP Gateway: xdr/features/collect/integrations/cloud_and_saas/ubika_waap.md
           - Zscaler ZIA: xdr/features/collect/integrations/cloud_and_saas/zscaler_zia.md
         - Email:
           - Apache Spamassassin: xdr/features/collect/integrations/email/spamassassin.md