Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Seculert

 

The JSA DSM for Seculert collects events from the Seculert cloud service.

The following table describes the specifications for the Seculert DSM:

Table 1: Seculert DSM Specifications

Specification

Value

Manufacturer

Seculert

DSM name

Seculert

RPM file name

DSM-SeculertSeculert-JSA_version-build_number.noarch.rpm

Supported versions

v1

Protocol

Seculert Protection REST API Protocol

Recorded event types

All malware communication events

Automatically discovered?

No

Includes identity?

No

Includes custom properties?

No

More information

Seculert website (https://www.seculert.com)

To integrate Seculert with JSA, complete the following steps:

  1. Download and install the most recent version of the following RPMs on your JSA console:

    • Protocol-Common

    • DSM-DSMCommon

    • Seculert DSM RPM

    • SeculertProtectionRESTAPI PROTOCOL RPM

  2. Add a Seculert log source on the JSA Console. The following table describes the parameters that require specific values for Seculert event collection:

    Table 2: Seculert Log Source Parameters

    Parameter

    Value

    Log Source type

    Seculert

    Protocol Configuration

    Seculert Protection REST API

    API Key

    32 character UUID

    For more information about obtaining an API key, see Obtaining an API Key.