Does Endpoint AMP send syslog event ?

peter.peng — Fri, 21 Feb 2020 05:06:52 GMT

Hi Sir:

Does Endpoint AMP send syslog event ? or AMP can get any information by restFul or API ?

Re: Does Endpoint AMP send syslog event ?

David Janulik — Thu, 08 Nov 2018 10:07:52 GMT

Hello,

Security Ops rely on API to get e.g. syslog event. API call would let you get description of behavior indicators. You should be able to pull the name, title, description and lots of other indicator data from it.

Go into your dashboard if you do not yet have an API key and you can establish one under Accounts > API Credentials.

Cisco AMP has gitub source to start with API.

https://github.com/CiscoSecurity/amp-01-basics

Or you can have a look at official documentation, as below:

https://api-docs.amp.cisco.com/

Regards

David

topic Does Endpoint AMP send syslog event ? in Endpoint Security

Does Endpoint AMP send syslog event ?

Re: Does Endpoint AMP send syslog event ?