Cyble Vision Alerts
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | CybleVisionAlerts |
| Publisher | Cyble |
| Used in Solutions | Cyble Vision |
| Collection Method | CCF |
| Connector Definition Files | CybleVisionAlerts_DataConnectorDefinition.json |
| DCR Definition Files | CybleVision_DCR.json |
| CCF Configuration | CybleVision_PollingConfig.json |
| CCF Capabilities | APIKey, Paging, POST |
| Microsoft Learn | View on Learn |
The Cyble Vision Alerts CCF Data Connector enables Ingestion of Threat Alerts from Cyble Vision into Microsoft Sentinel using the Codeless Connector Framework Connector. It collects alert data via API, normalizes it, and stores it in a custom table for advanced detection, correlation, and response.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
CybleVisionAlerts_CL |
✗ | ✓ | ✗ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- Cyble Vision API token: An API Token from Cyble Vision Platform is required.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Step 1 - Generating API Token from Cyble Platform
Navigate to Cyble Platform and log in using your Cyble Vision credentials.
Once logged in, go to the left-hand panel and scroll down to Utilities. Click on Access APIs. On the top-right corner of the page, click the + (Add) icon to generate a new API key. Provide an alias (a friendly name for your key) and click Generate. Copy the generated API token and store it securely.
2. STEP 2 - Configure the Data Connector
Return to Microsoft Sentinel and open the Cyble Vision Alerts data connector configuration page. Paste your Cyble API Token into the API Token field under 'API Details'.
- API Token: (password field)
- Query Interval (in minutes): Enter Time in Minutes (e.g., 10)
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊