Investigate Secure Event
A 2-step recipe with Sysdig. We can help you get access.
Recipe · 2 steps
Investigate Secure Event
with Sysdig · Threat Detection & Response Management
Surface secure events and correlate them with the activity audit.
- Retrieve secure runtime events within the time window.
- Retrieve the activity audit trail across the same time window.
What you'll need to have ready
- bearerToken: Sysdig API bearer token used for Authorization.
- from: Start time in Unix epoch seconds.
- to: End time in Unix epoch seconds.
- filter: Optional filter expression for the secure events.
For your developer
Arazzo workflow sysdig:investigate-secure-event, 2 operations: listSecureEvents → listActivityAudit. Specs on APIs.io.