Configure Endpoint Security - Cylance

Access your Cylance AV threats on your RocketCyber dashboard

  1. Collect needed Cylance login information
    1. Log on to your Cylance dashboard
    2. Go to Settings
      fig-1-1.png
    3. Go to Integrations
      Fig1-2.png
    4. If you have not already done so, click Add Application and create an application to integrate with RocketCyber
      Fig1-3.png
    5. Select the application you would like to integrate with RocketCyber
      Fig1-4.png
    6. On the custom application page
      1. Copy the Tenant ID on the right side of your screen
        fig-1-5.png
      2. Copy the Application ID and Application Secret from the menu just below the app name
        Fig1-6.png
  2. Integrate with RocketCyber
    1. Log in to RocketCyber
      fig-2-1.png
    2. If you have not already done so, enable the Cylance Monitor in the App Store
      fig-2-2.png
    3. Find the Cylance Monitor on your dashboard, and select the gear to enter the configuration menu
    4. Enter your Tenant ID, Application ID, and Application Secret in the appropriate fields
      fig-2-3.png
    5. Click Save

All AV data will be reported within a single organization in the RocketCyber dashboard.  We recommend you do the integration in your internal organization (i.e. the organization you put your own devices in).

Future integrations are in development, based on creating a mapping from your the assigned site or company in your AV dashboard to the organization name in RocketCyber.