- Supported Cloud Connectors
- Armis Cloud Connector
- AWS Cloud Connector
- AWS Multi-Tenant Cloud Connector
- Azure Cloud Connector
- Azure Cloud Connector Overview
- Azure Audit Source and Event Support
- Prerequisites to Configure the Azure Cloud Connector
- Configure the Azure Cloud Connector
- Collect EventHub Information for Azure EventHub Endpoints
- Collect all Microsoft Defender ATP Events
- Configure Azure to Monitor Security Center Events in Azure VMs
- Bitglass Cloud Connector
- Box Cloud Connector
- Centrify Cloud Connector
- Cisco AMP for Endpoints Cloud Connector
- Cisco Meraki Cloud Connector
- Cisco Umbrella Cloud Connector
- Citrix ShareFile Cloud Connector
- Cloudflare Cloud Connector
- Code42 Incydr Cloud Connector
- CrowdStrike Falcon Cloud Connector
- Cybereason Cloud Connector
- CylanceProtect Cloud Connector
- Dropbox Business Cloud Connector
- Duo Security Cloud Connector
- Egnyte Cloud Connector
- Fidelis Cloud Connector
- GitHub Cloud Connector
- Google Cloud Platform (GCP) Cloud Connector
- Google Cloud Pub/Sub Cloud Connector
- Google Workspace (Formerly G Suite) Cloud Connector
- LastPass Enterprise Cloud Connector
- Mimecast Email Security Cloud Connector
- Netskope Cloud Connector
- Office 365 Cloud Connector
- Okta Cloud Connector
- OneLogin Cloud Connector
- Palo Alto Networks SaaS Security Cloud Connector
- Ping Identity Cloud Connector
- Proofpoint Cloud Connector
- Rapid7 InsightVM Cloud Connector
- Salesforce Cloud Connector
- SentinelOne Cloud Connector
- ServiceNow Cloud Connector
- Slack App Cloud Connector
- Slack Classic App Cloud Connector (Formerly known as Slack Enterprise Grid Cloud Connector)
- Snowflake Cloud Connector
- Sophos Central Cloud Connector
- Symantec CloudSOC Cloud Connector
- Symantec Endpoint Protection (SEP) Mobile Cloud Connector
- Symantec Email Security.cloud Cloud Connector
- Symantec WSS Cloud Connector
- Tenable.io Cloud Connector
- VMware Carbon Black Cloud Endpoint Standard Cloud Connector
- Workday Cloud Connector
- Zoom Cloud Connector
- Custom Cloud Connector
- Webhook Cloud Connector
Egnyte Cloud Connector
Egnyte is a cloud storage and online backup solution that offers file sharing and collaboration tools for teams, and administrative controls for management and IT. The platform provides data protection and secure content collaboration. For more information visit their website.
Prerequisites to Configure the Egnyte Connector
Before you configure the Egnyte connector you must complete the following prerequisites:
Obtain the application key.
Note the hostname shared by the Egnyte support team.
Note the user name and password of the Egnyte administrator.
Ensure that the https://*.egnyte.com service is open for communication with the Exabeam Cloud Connector platform.
Obtain an Application Key
Egnyte APIs are authenticated via application keys. You must register for a developer account, register your application, and obtain the application key that you can use as a client ID while configuring the Egnyte connector.
To obtain an application key:
Log in to the Egnyte developer console.
Navigate to My Account> Applications > Create a New Application.
In the Register your New Application section, enter the required information:
Name of your application – Specify a name for your application.
Type – Select Internal Application (own company use only).
Current User Base – Select New App.
Platform – Select Web App.
Egnyte domain you will use for testing – Specify the Egnyte account domain. For example, myorg.egnyte.com.
In the Select which Web APIs this Application will Use section, select Egnyte Connect API.
In the Terms of Service section, select I have read and agree to the Egnyte API Terms of Service.
Click Register Application.
Navigate to My Account> Keys and note the application key. Use this application key, represented by a string of letters and numbers, to configure the Egnyte cloud connector.
Configure the Egnyte Connector
Egnyte is a cloud storage and online backup solution that offers file sharing and collaboration tools for teams, and administrative controls for management and IT. The platform provides data protection and secure content collaboration. For more information visit their website.
The following table displays audit source API and security events supported by the connector.
Audit Source: API | Service or Module Covered | Event Types | Event Included |
---|---|---|---|
Access | Login success Login failed Account locked-out | ||
Password management | Password reset Password changed | ||
Files | File copied, file created, file deleted, file moved, file renamed, file downloaded, file downloaded via anonymous link, file downloaded via authenticated link, file locked, file previewed, file previewed via anonymous link, file previewed via authenticated link, file unlocked, file uploaded | ||
Notes | Note created, note deleted, note added to file, note deleted from file, unsupported action | ||
Folders | Folder copied, folder created, folder deleted, folder renamed, folder moved | ||
Folder ACL | Add permission to group, add permission to user, remove permission from user, replace permission to user, add permission to role | ||
User Management | User created, user deleted, user email changed | Represents events related to user management | |
Settings | User first name changed, user last name changed, user disabled on expiration setting changed, user deleted on expiration setting changed, user disabled, user enabled, user second factor enabled, user second factor disabled, user verify email | ||
Roles Management | User downgraded from admin to power user, user downgraded from power user to standard user, user upgraded from standard to power user, user upgraded from power user to admin | ||
Password | User password changed, user password reset | ||
Group Management | Group created, group deleted, group renamed, user added to group, user removed from group | Represents events related to group management |
To configure the Egnyte connector to import data into the Exabeam Cloud Connector platform:
Complete the Prerequisites to Configure the Egnyte Connector.
Log in to the Exabeam Cloud Connectors platform with your registered credentials.
Navigate to Settings > Accounts > Add Account.
Click Select Service to Add, then select Egnyte from the list.
In the Accounts section, enter the required information.
Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.
Account Name – Specify a name for the Egnyte connector. For example, Egnyte_collaboration.
(Optional) Description – Describe the Egnyte connector. For example, Egnyte cloud storage for secure content collaboration.
Host Name – Enter your organization’s Egnyte domain. For example, myorg.egnyte.com.
Caution
Do not include https:// in the host name.
Client-ID – Enter the application key that you obtained while completing prerequisites.
Username – Enter the user name of Egnyte administrator.
Password – Enter the password for the Egnyte administrator.
Throttling - Max API Calls – Use the default value. This sets the number of allowed API requests to be made to the Egnyte API. Do not modify the default value unless instructed otherwise by Exabeam support.
Throttling – Time Duration – Use the default value. This sets the duration for the allowed API requests to be made to the Egnyte API. Do not modify the default value unless instructed otherwise by Exabeam support.
Note
Required fields are indicated by a red bar.
To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.
Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.
To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows
OK
.