WithSecure Elements

WithSecure Elements is a unified, cloud-based cyber security platform that elevates security capabilities and gains complete protection against every kind of cyber threat – from targeted attacks to zero-day ransomware. For detailed information, please refer to the WithSecure’s official documentation.

Integration Method: API

Tables: Detection Finding (2004)

This integration supports the following type of events.

This integration supports the following versions.

Note:

WithSecure Elements doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service.

Prerequisites

• The user should have access to Elements Security Center as an EPP administrator.

• The user should have access to the DataBee console.

Configuration Overview

1. Create an API Client with required permissions to fetch the data.

2. Create WithSecure Elements Data Feed in the DataBee console with the required Client credentials.

   DataBee Parameter	WithSecure Parameter
   Client Key	Client ID
   Client Secret	Secret

WithSecure Configuration

1. Log in as an EPP administrator to Elements Security Center.

2. From the navigation bar, select MANAGEMENT.
    

3. Under MANAGEMENT, select Organization Settings.
    

4. From the “Organization Settings” window, select API Clients.
    

5. Select Add new.
    

6. In the “Add new API client” window, do the following:

   1. Enter the ‘Description’ for the new client credentials.

   2. Select Read-only to grant the client read access to the data, then click Add.

   

7. Copy and store the generated Client ID and Secret, then select I have copied and stored the secret option, and then select Done.
    
   

   Note:

   Be sure to copy and save secret as it will not be shown again.

8. A new item is now added to the list.
    

   If you encounter any difficulties with the WithSecure configuration, refer to the latest WithSecure’s official documentation online.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the WithSecure Elements and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with.

   • Authorization Method: OAuth2

   • Client Key: paste the Client ID generated earlier.

   • Client Secret: paste the Secret generated earlier.

   • Event Types: preselected for all the event types that integration pulls.
      

6. Click Submit.

Troubleshooting Tips

• If you are facing an invalid client error, it might be due to incorrect credentials. Please ensure that the client ID and secret are pasted correctly. Since the secret cannot be viewed after the first time, re-create the API client, paste the generated credentials into a text editor to verify that there are no spaces or unexpected characters, and then reconfigure the DataBee feed.