Skip to content

Commit aa36e04

Browse files
committed
feat Updating overall doc best practices
Signed-off-by: S3B4SZ17 <sebastian.zumbado@sysdig.com>
1 parent e565a27 commit aa36e04

File tree

6 files changed

+23
-4
lines changed

6 files changed

+23
-4
lines changed

Packs/Sysdig/Author_image.png

-12.7 KB
Loading

Packs/Sysdig/CONTRIBUTORS.json

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
[
2+
"Sebastian Zumbado Herrera",
3+
"Federico Barcelona Auria"
4+
]

Packs/Sysdig/Integrations/Sysdig-Response-Actions/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
This is an integration that will use Sysdig agent to respond to malicious activity by triggering different actions at the host or container level like killing a container, quarantine a file or perform a system capture
2-
This integration was integrated and tested with version xx of SysdigResponseActions.
2+
This integration was integrated and tested with version `v1alpha1` of SysdigResponseActions.
33

44
## Configure Sysdig Response Actions in Cortex
55

66

77
| **Parameter** | **Description** | **Required** |
88
| --- | --- | --- |
99
| Your server URL | | True |
10-
| API Key | The API Key to use for the connection | True |
10+
| Password | The API Key to use for the connection | True |
1111
| Trust any certificate (not secure) | | False |
1212
| Use system proxy settings | | False |
1313

Packs/Sysdig/Playbooks/Sysdig_Trigger_System_Capture_Playbook.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
id: 4c043586-8f9d-4c47-80b2-02288506f7e3
1+
id: Sysdig Trigger System Capture
22
version: -1
33
contentitemexportablefields:
44
contentitemfields:

Packs/Sysdig/README.md

+16-1
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,18 @@
11
# Sysdig Response Actions
22

3-
This is an integration that will use Sysdig agent to respond to malicious activity by triggering different actions at the host or container level like killing a container, quarantine a file or perform a system capture.
3+
This integration utilizes the Sysdig agent and the Sysdig Response Actions API to facilitate automated and manual remediation of security incidents. It enables security teams to take precise actions at the host or container level, such as terminating compromised containers, quarantining suspicious files, or capturing detailed system activity for forensic analysis. These capabilities are designed to enhance incident response workflows and improve overall security operations.
4+
5+
## What does this pack do?
6+
7+
This pack leverages the Sysdig Response Actions API to enable automated and manual responses to security incidents. Key features include:
8+
9+
- **Container Management**: Terminate malicious containers to prevent further damage.
10+
- **File Quarantine**: Isolate suspicious files to mitigate potential threats.
11+
- **System Capture**: Perform detailed system captures for forensic analysis.
12+
- **Host-Level Actions**: Execute commands or scripts on hosts to remediate issues.
13+
14+
These capabilities help streamline incident response and enhance security posture.
15+
16+
_For more information, visit [Sysdig.](https://sysdig.com)_
17+
18+
[![Sysdig Overview](./doc_files/Author_image.png)](https://sysdig.com)
4.12 KB
Loading

0 commit comments

Comments
 (0)