'SIEM/Ticketing Integration' enhancement

By default, toggle button under 'SIEM/Ticketing Integration' section is turned off.

1.png

 

Turning on the toggle button under 'SIEM/Ticketing Integration' section will provide us with three options as shown here: Quarantine, EmployeeShield® and Phish911TM.  When the toggle button under 'SIEM/Ticketing Integration' section is turned on, Admins MUST turn on at least one of the three (Quarantine, EmployeeShield® and Phish911TM) toggle buttons.

2.png

 

Quarantine:

Graphus will publish an event only when a 'Quarantine' alert is generated.

3.png

 

EmployeeShield®:

Graphus will publish an event only when an EmployeeShield® alert is generated.

4.png

 

Phish911TM:

Graphus will publish an event only when a Phish911TM alert is generated.

5.png

 

Admins have the flexibility to turn on more than one toggle button, in which case an event will be published for all the chosen alert types.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us