Halcyon Anti Ransomware

Prev Next

Halcyon is a cybersecurity platform specifically engineered to combat ransomware threats across all stages of an attack. It focuses on prevention, detection, and rapid recovery, aiming to minimize business disruption and eliminate the need for ransom payments.

Integration Method: API 

Tables: User Inventory Info (5003), Device Inventory Info (5001), Detection Finding (2004). 

This integration supports the following events.  

Event  

Description  

Alerts

Details of all the alerts that are present.

Events

Details of all the events that are generated.

Devices

Details of all the devices that are configured.

Users

Details of all the users that are configured.

 This integration supports the following versions.  

 Halcyon API Version 

v2

 Halcyon Version 

1.0.4118.1

Prerequisites  

  • The user should have access to the Halcyon portal with their respective login credentials.

  • The user should have access to the DataBee console. 

Configuration Overview 

  1. Get Username and Password to fetch the data.

  2. Create Halcyon Data Feed in the DataBee console with the required Client credentials.

    DataBee Parameter

    Halcyon Parameter

    Username

    Username

    Password

    Password

     

Halcyon Configuration 

  1. Log in to Halcyon console using Username and Password.
     

DataBee Configuration 

  1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
     

  2. Search for Halcyon Anti Ransomware and click on it.
     

  3. Click on API Ingest.
     

  4. Enter the required details in the form and click Next.
     

  5. In the configuration page, add the following details

    • Authorization Method: TokenUrlAuth

    • Username: the Halcyon account username used to authenticate.

    • Password: the corresponding password for the username.

        

  6. Click on Submit.

Troubleshooting Tips

  • Ensure the Username and Password are entered correctly. Make sure that no spaces or unexpected characters are included and reconfigure the DataBee feed.