Tines

Cybereason offers an endpoint protection platform. It delivers antivirus software, endpoint detection and response with one agent, and a suite of managed services.

First, create a Cybereason resource in Tines

Navigate to the team that will be using the API and click "Resource"

Input the values for the Cybereason resource

1. Name: cybereason_username
2. Description: Optional
3. Builder: Your Cybereason username

1. Access: What other teams can also use the resource

1. Login to your Tines tenant
2. Navigate to the team that will be using the API and click "Resource"
3. Click "+ New Resource"
4. Input the values for the Cybereason resource
 1. Name: cybereason_username
 2. Description: Optional
 3. Builder: Your Cybereason username
5. Optional
 1. Access: What other teams can also use the resource
6. Click "Save resource"

Lastly, create Cybereason credentials in Tines

One HTTP request type: "cybereason_cookie"

- One Text type: "cybereason_password"
- One HTTP request type: "cybereason_cookie"

Navigate to the team that will be using the API and click "Credential"

Click "+ New Credential" and select "Text"

Input the values for the Cybereason credential

1. Name: cybereason_password
2. Description: Optional
3. Value: Your Cybereason password

1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains
2. Access: What other teams can also use the API

1. Navigate to the team that will be using the API and click "Credential"
2. Click "+ New Credential" and select "Text"
3. Input the values for the Cybereason credential
 1. Name: cybereason_password
 2. Description: Optional
 3. Value: Your Cybereason password
4. Optional
 1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains
 2. Access: What other teams can also use the API
5. Click "Save"

Click "+ New Credential" and select "HTTP Request"

1. Name: cybereason_ccokie
2. Description: Optional
3. URL: <code>https://integration.cybereason.net:8443/login.html</code>
4. Content-Type: <code>"Custom": "application/x-www-form-urlencoded"</code>
5. Method: post
6. Payload: Copy the below object and paste into the "Plain code" section: 
 { "username": "&lt;&lt;RESOURCE.cybereason_username&gt;&gt;", "password": "&lt;&lt;CREDENTIAL.cybereason_password&gt;&gt;" }
 
7. Disable redirect follow: Click the "+ Option" button, select choose "Disable redirect follow" and ensure the box remains ticked: 
 
 
8. Click "Run options" and make sure you get a successful response like the following:
 
 
 
9. Location of token from response: <code>SPLIT(cybereason_cookie.headers["set-cookie"], ";") |&gt; FIRST(%)</code>

1. Click "+ New Credential" and select "HTTP Request"
2. Input the values for the Cybereason credential
 1. Name: cybereason_ccokie
 2. Description: Optional
 3. URL: <code>https://integration.cybereason.net:8443/login.html</code>
 4. Content-Type: <code>"Custom": "application/x-www-form-urlencoded"</code>
 5. Method: post
 6. Payload: Copy the below object and paste into the "Plain code" section: 
 { "username": "&lt;&lt;RESOURCE.cybereason_username&gt;&gt;", "password": "&lt;&lt;CREDENTIAL.cybereason_password&gt;&gt;" }
 
 7. Disable redirect follow: Click the "+ Option" button, select choose "Disable redirect follow" and ensure the box remains ticked: 
 
 
 8. Click "Run options" and make sure you get a successful response like the following:
 
 
 
 9. Location of token from response: <code>SPLIT(cybereason_cookie.headers["set-cookie"], ";") |&gt; FIRST(%)</code>
3. Optional
 1. Domains: Ensure this credential can only be used when making HTTP requests to specific domains
 2. Access: What other teams can also use the API
4. Click "Save"

Your credential should look like the following:

For more on creating credentials in Tines, click <a href="https://explained.tines.com/en/articles/6877578-what-are-credentials-in-tines">here</a>.

You can find a selection of Cybereason stories in the <a href="https://www.tines.com/library?s=cybereason&amp;view=all" target="_blank" rel="nofollow noopener noreferrer">story library</a>.

The Header configuration for your Cybereason credential should be:

"Cookie": "&lt;&lt;CREDENTIAL.cybereason_cookie&gt;&gt;"

Here is an example Cybereason action you can copy and paste onto your storyboard in Tines:

First, create a Cybereason resource in Tines

Lastly, create Cybereason credentials in Tines

Text type

HTTP request type

Using the credential in an action