If you're having trouble at any stage please contact us at support@skyformation.com. 

Preface

Symantec CloudSOC cloud service provides visibility into cloud services transactions so users can make informed policy decisions to reduce risk. The platform enables enterprises to secure both sanctioned and unsanctioned cloud services, protect sensitive data across the cloud and web, and stop online threats. 

For more information on Symantec CloudSOC please visit:
https://www.symantec.com/products/cloud-application-security-cloudsoc

The main challenges and needs are to:

• Get and retain full audit of activities in your Symantec CloudSOC
• Get all alerts and policy events from Symantec CloudSOC
• The granular activities and alerts should be available at the organization’s central log or event management system for compliance, investigation or forensic needs.
• Detect security threats and policy violations

What is it

SkyFormation for Symantec CloudSOC connector is part of the Exabeam Cloud Connectors module:
https://www.exabeam.com/product/exabeam-cloud-connectors/
Exabeam Cloud Connectors are ready made connectors that continuously retrieves audit events, activities, alerts, flows and more from available data sources in cloud services via its public APIs.

The events are then sent to your Exabeam Advance Analytics (UEBA) or Exabeam Data Lake (SIEM)
or other supported security systems.

How it works

SkyFormation for Symantec CloudSOC connector retrieves the events from the cloud service through its public APIs and send them over syslog to the relevant security system encoded as CEF o JSON.

Connector's API/Audit Sources & Events Supported

How to on-board Symantec CloudSOC connector to SkyFormation app

Adding the Symantec CloudSOC connector to SkyFormation app