WithSecure Elements (CCF)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | WithSecureElementsCCF |
| Publisher | WithSecure |
| Used in Solutions | WithSecureElementsCCF |
| Collection Method | CCF |
| Connector Definition Files | WithSecureElements_ConnectorDefinition.json |
| DCR Definition Files | WithSecureElements_DCR.json |
| CCF Configuration | WithSecureElements_PollerConfig.json |
| CCF Capabilities | OAuth2, Paging, POST |
WithSecure Elements security events ingested via Microsoft Sentinel's Codeless Connector Framework (CCF) — a fully SaaS deployment with no Azure Function, Storage Account or Key Vault to manage.
The connector polls the WithSecure Elements security-events API and stores normalized events in the WsSecurityEvents_CL Log Analytics table.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
WsSecurityEvents_CL |
✓ | ✓ | ✓ |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): read and write permissions on the workspace are required.
Custom Permissions:
- WithSecure Elements API client credentials: Client credentials are required. See the user guide for details.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Create WithSecure Elements API credentials
Follow the user guide to create Elements API credentials. Save the client id and client secret in a safe place.
2. Connect WithSecure Elements to Microsoft Sentinel
Provide the Elements API URL together with the client id and client secret you created in the previous step, then click Connect to start ingesting events.
- Elements API URL: https://api.connect.withsecure.com
- Engine (optional): default
- Engine Group (optional): default
- OAuth Configuration:
- Elements API Client Id
- Elements API Client Secret
- Click 'Connect' to authenticate
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊