High-Severity Model Coverage
A 3-step recipe with Varonis. We can help you get access.
Recipe · 3 steps
High-Severity Model Coverage
with Varonis · Threat Detection & Response Management
Audit a threat model's alert coverage and annotate its newest alert.
- List the threat models matching the name filter to identify which model to audit coverage for.
- Retrieve alerts generated by the first matching threat model to confirm it is producing detections.
- Add a coverage note to the newest alert produced by the audited threat model.
What you'll need to have ready
- apiKey: Varonis DatAlert API key sent in the X-API-Key header.
- nameFilter: Threat model name filter. Supports pipe-separated values and wildcard characters for pattern matching.
- lastDays: How many days back to search for alerts.
- note: Coverage note recorded against the newest alert.
For your developer
Arazzo workflow varonis:high-severity-model-coverage, 3 operations: getThreatModels → getAlerts → addAlertNote. Specs on APIs.io.