Pre-Release
This feature is actively being developed. Breaking changes should be expected. Synqly Labs is available only in Synqly Mesh.
Please contact us before using this feature.
Labs URL: synqly://labs/trellix
- Create an integration for the provider, the same way you would for the real provider.
- Set the provider's URL to the Labs URL at the top of this page.
- Fill in the credential fields. Labs accepts any value, but the credential must be the type the provider asks for, such as an OAuth client ID and secret or an API token.
Then call any operation the provider supports. Your requests run through the same connector that serves a real provider tenant, so the responses have the provider's shape and your code works against the real provider without changes.
Provider: Trellix ePolicy Orchestrator
| Operation | On Labs |
|---|---|
get_endpoint | Available |
network_quarantine | Available |
query_alerts | Available |
query_endpoints | Available |
query_threatevents | Available |
| Filter | Operators | Not on Labs |
|---|---|---|
device.uid | eq | |
finding_info.created_time | gt, lt | |
finding_info.created_time_dt | gt, lt | |
metadata.correlation_uid | eq | |
severity | eq, in | |
time | gt, lt | |
time_dt | gt, lt |
| Sort | Directions | Not on Labs |
|---|---|---|
finding_info.created_time | asc, desc | |
finding_info.created_time_dt | asc, desc | |
finding_info.first_seen_time | asc, desc | |
finding_info.first_seen_time_dt | asc, desc | |
time | asc, desc | |
time_dt | asc, desc |
| Filter | Operators | Not on Labs |
|---|---|---|
device.hostname | eq, ne, like | |
device.hw_info.serial_number | eq, ne, like | |
device.ip | eq, ne, like | |
device.last_seen_time | gt, lt | |
device.name | eq, ne, like | |
device.uid | eq | |
time | gt, lt |
| Sort | Directions | Not on Labs |
|---|---|---|
device.hostname | asc, desc | |
device.hw_info.serial_number | asc, desc | |
device.ip | asc, desc | |
device.last_seen_time | asc, desc | |
device.name | asc, desc | |
time | asc, desc |
| Filter | Operators | Not on Labs |
|---|---|---|
finding_info.modified_time_dt | gt, lt | |
finding_info.title | like | |
finding_info.types | eq, in | |
message | like | |
risk_score | eq, gt, gte, lt, lte | |
severity | eq, in |
| Sort | Directions | Not on Labs |
|---|---|---|
finding_info.first_seen_time_dt | asc, desc | |
finding_info.modified_time_dt | asc, desc | |
severity | asc, desc | |
time | asc, desc |