Fortinet Document Library

Version:


Table of Contents

1.0.0
Copy Link

About the connector

 

Verodin’s Instrumented Security platform is a foundational technology. It is a new approach to managing your cyber-security lifecycle.

 

This document provides information about the Verodin connector, which facilitates automated interactions with a Verodin server using FortiSOAR™ playbooks. Add the Verodin connector as a step in FortiSOAR™ playbooks and perform automated operations, such as retrieving a list of actions for each simulation, retrieving node topology, and running a simulation based on the simulation ID you have specified.

 

Version information

Connector Version: 1.0.0

Authored By: Fortinet

Certified: No

 

Installing the connector

All connectors provided by FortiSOAR™ are delivered using a FortiSOAR™ repository. Therefore, you must set up your FortiSOAR™ repository and use the yum command to install connectors:

yum install cyops-connector-verodin

For the detailed procedure to install a connector, click here.

 

Configuring the connector

For the procedure to configure a connector, click here.

 

Actions supported by the connector

The following automated operations can be included in playbooks and you can also use the annotations to access operations from FortiSOAR™ release 4.10.0 onwards:

 

Function Description Annotation and Category
Get Nodes Retrieves node topology from Verodin. get_nodes
Investigation
Get Map Retrieves topology map from Verodin. get_map
Investigation
Get Zone Retrieves information for a zone from Verodin. get_zone
Investigation
Delete Zone Deletes a zone from Verodin, based on the zone ID you have specified. delete_zone
Investigation
Get Simulations Actions Retrieves a list of actions for each simulation. get_sims_actions
Investigation
Run Simulation Runs a simulation based on the simulation ID you have specified. run_simulation
Investigation
Get Simulation Retrieves a simulation based on the input parameters you have specified. get_simulation
Investigation
Delete Simulation Deletes a simulation based on the simulation ID you have specified. delete_simulation
Investigation
Get Job Retrieves all information about a specific job based on the job ID you have specified. get_job
Investigation
Run Job Runs a job based on the job ID you have specified. run_job
Investigation
Get Job Actions >Retrieves a list and details of job actions. get_job_actions
Investigation
Cancel Job Cancels a job based on the job ID you have specified.. cancel_job
Investigation

 

Included playbooks

The Sample - Verodin - 1.0.0 playbook collection comes bundled with the Verodin connector. This playbook contains steps using which you can perform all supported actions. You can see the bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Verodin connector.

 

Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection, since the sample playbook collection gets deleted during connector upgrade and delete.

 

About the connector

 

Verodin’s Instrumented Security platform is a foundational technology. It is a new approach to managing your cyber-security lifecycle.

 

This document provides information about the Verodin connector, which facilitates automated interactions with a Verodin server using FortiSOAR™ playbooks. Add the Verodin connector as a step in FortiSOAR™ playbooks and perform automated operations, such as retrieving a list of actions for each simulation, retrieving node topology, and running a simulation based on the simulation ID you have specified.

 

Version information

Connector Version: 1.0.0

Authored By: Fortinet

Certified: No

 

Installing the connector

All connectors provided by FortiSOAR™ are delivered using a FortiSOAR™ repository. Therefore, you must set up your FortiSOAR™ repository and use the yum command to install connectors:

yum install cyops-connector-verodin

For the detailed procedure to install a connector, click here.

 

Configuring the connector

For the procedure to configure a connector, click here.

 

Actions supported by the connector

The following automated operations can be included in playbooks and you can also use the annotations to access operations from FortiSOAR™ release 4.10.0 onwards:

 

Function Description Annotation and Category
Get Nodes Retrieves node topology from Verodin. get_nodes
Investigation
Get Map Retrieves topology map from Verodin. get_map
Investigation
Get Zone Retrieves information for a zone from Verodin. get_zone
Investigation
Delete Zone Deletes a zone from Verodin, based on the zone ID you have specified. delete_zone
Investigation
Get Simulations Actions Retrieves a list of actions for each simulation. get_sims_actions
Investigation
Run Simulation Runs a simulation based on the simulation ID you have specified. run_simulation
Investigation
Get Simulation Retrieves a simulation based on the input parameters you have specified. get_simulation
Investigation
Delete Simulation Deletes a simulation based on the simulation ID you have specified. delete_simulation
Investigation
Get Job Retrieves all information about a specific job based on the job ID you have specified. get_job
Investigation
Run Job Runs a job based on the job ID you have specified. run_job
Investigation
Get Job Actions >Retrieves a list and details of job actions. get_job_actions
Investigation
Cancel Job Cancels a job based on the job ID you have specified.. cancel_job
Investigation

 

Included playbooks

The Sample - Verodin - 1.0.0 playbook collection comes bundled with the Verodin connector. This playbook contains steps using which you can perform all supported actions. You can see the bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Verodin connector.

 

Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection, since the sample playbook collection gets deleted during connector upgrade and delete.