If you're having trouble at any stage please contact us at support@skyformation.com.
Preface
Citrix ShareFile is a service to store, manage and share files as photos and documents.Citrix ShareFile service is delivered as a cloud service.Citrix ShareFile helps organizations move faster with infinite scalability and lower cost for their file sharing needs.
But at the same time, the public cloud Software as a Service (SaaS) model presents the organization with new security challenges.
The main challenges and needs are to:
- Get and retain full audit of activities inCitrix ShareFile account
- Retrieve theCitrix ShareFile account activities as users’ access to file/folders, files/folder sharing activities and scope, file/folders download and more.
- The granular activities should be available at the organization’s central log or event management system for compliance, investigation or forensic needs.
- Detect security threats and policy violations
What is it
SkyFormation Cloud Connector forCitrix ShareFile, is part of the SkyFormation Cloud Connectors module. It continuously ingests audit events from multiple audit sources in theCitrix ShareFile account, unify the events into a common application events format, enrich the events with needed detection context and send the events to any existing SIEM/SOC system.
How it works
SkyFormation Cloud Connector forCitrix ShareFile retrieves the events from theCitrix ShareFile service through its APIs. Before sending the events to the existing SIEM/SOC system the connector will
- Unify the events into the SkyFormation unified application events format
- Embed the origin event into the SkyFormation event
- Complement the event with missing information
- Enrich the event with detection context as AD identity information
- Encode the resulted event into a standard format (e.g. CEF)
- Send the event to the existing SIEM/SOC system over syslog
Citrix ShareFile Connector Audit Sources & Events Supported
Audit Source (API) | Service/Module Covered | Event Included |
---|---|---|
SharedSend | any | sharing |
SharedRequest | any | sharing requests |
Activity | any | administrative events |
AccessChange | any | Access events |
How to on-board Citrix ShareFile Connector to SkyFormation app
Adding Citrix ShareFile Connector To SkyFormation Platform
Comments
0 comments
Please sign in to leave a comment.