Prerequisites
To collect data from a Cybereason instance, Reco requires Username and Password of Cybereason API User and Company-specific Cybereason Tenant URL.
How to create API User for the integration?
In the Cybereason instance, log in as an administrative user
Follow guidance in the Cybereason documentation to ensure the server is enabled for API access
Navigate to the Admin -> Users section of the site using the menu on the left
Click the Create users button
In the form at the bottom of the page, enter a user email (this does not need to be valid) and a secure password
Check the API User toggle
Click Add user
Make note of the username and password before proceeding to the next step
Integrate Cybereason with Reco
In the Cybereason integration pop-up screen in Reco fill in the Base URL, Username and Password you have created above.