SIEM/Ticketing Integration alerts

The toggle button under the SIEM/Ticketing Integration section is turned off by default.

Enabling the toggle button under the SIEM/Ticketing Integration section provides Quarantine, EmployeeShield®, and Phish911™ options. Admins MUST turn on at least one of them. Currently, Graphus supports the following integrations: AWS S3, Splunk, ConnectWise, and BMS.

Quarantine:

If the Quarantine toggle is on, Graphus will publish an event only when a Quarantine alert is generated.

EmployeeShield^®:

If the EmployeeShield® toggle is on, Graphus will publish an event only when an EmployeeShield® alert is generated.

Phish911^TM:

If the Phish911^TM  toggle is on, Graphus will publish an event only when a Phish911^TM alert is generated.

Admins can turn on multiple toggle buttons, in which case an event will be published for all the chosen alert types.