{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Bitdefender GravityZone EDR Provider Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"bitdefender-gravityzone-edr-provider-configuration-guide","__idx":0},"children":["Bitdefender GravityZone EDR Provider Configuration Guide"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"1-introduction","__idx":1},"children":["1. Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide walks you through creating a Bitdefender GravityZone integration for use with Synqly's EDR Connector."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"2-prerequisites","__idx":2},"children":["2. Prerequisites"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to a Bitdefender GravityZone Control Center instance."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An administrator account with permissions to create API keys."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"3-create-api-credentials","__idx":3},"children":["3. Create API credentials"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-1-log-in-to-gravityzone-control-center","__idx":4},"children":["Step 1: Log in to GravityZone Control Center"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Navigate to your GravityZone Control Center URL (e.g., ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://cloud.gravityzone.bitdefender.com"]},") and log in with an administrator account."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"step-2-generate-an-api-key","__idx":5},"children":["Step 2: Generate an API Key"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["My Account"]}," → ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Keys"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add"]}," to create a new API key."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Ensure the key has access to the following areas:"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Permission"},"children":["Permission"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Network"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query endpoints, get endpoint details, check task status"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Incidents / EDR"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query incidents, alerts, manage blocklist, isolate/restore endpoints, update incident notes"]}]}]}]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the generated API key and store it securely. It will not be shown again."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"4-identify-your-control-center-url","__idx":6},"children":["4. Identify your Control Center URL"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Your Control Center URL is the base address you use to access the GravityZone console. For example:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Cloud: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://cloud.gravityzone.bitdefender.com"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On-premise: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://your-gravityzone-server.example.com"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Provide the base URL only — do not append ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/api"]}," or any path suffix."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"5-configure-the-integration","__idx":7},"children":["5. Configure the integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To configure a new Bitdefender GravityZone integration in the Synqly system, provide each of the values as defined below:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["URL"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The base URL of your GravityZone Control Center"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["API Key"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The API key generated in Step 2"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"6-supported-operations","__idx":8},"children":["6. Supported Operations"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operation"},"children":["Operation"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query Endpoints"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["List and search managed endpoints"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Get Endpoint"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Retrieve detailed information for a specific endpoint"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query Threat Events"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query endpoint-level EDR incidents"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query Alerts"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query organization-level XDR extended incidents"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Query IOCs"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["List blocklist entries"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Create IOCs"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Add hash-based entries to the blocklist"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Delete IOCs"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Remove entries from the blocklist"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Network Quarantine"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Isolate or restore endpoints from network isolation"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Create Threat Note"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Add or replace a note on an incident"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"7-known-limitations","__idx":9},"children":["7. Known Limitations"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Threat notes replace existing content"]}," — the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["create_threat_note"]}," operation replaces the entire incident note rather than appending."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Network quarantine is asynchronous"]}," — isolation and restore operations submit tasks that are polled for completion."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["IOC creation is hash-only"]}," — only SHA-256 and MD5 hash IOCs are supported via the v1.0 API."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Limited server-side filtering"]}," — Bitdefender supports fewer filter fields than some other EDR providers; additional filtering may be applied client-side."]}]}]},"headings":[{"value":"Bitdefender GravityZone EDR Provider Configuration Guide","id":"bitdefender-gravityzone-edr-provider-configuration-guide","depth":1},{"value":"1. Introduction","id":"1-introduction","depth":2},{"value":"2. Prerequisites","id":"2-prerequisites","depth":2},{"value":"3. Create API credentials","id":"3-create-api-credentials","depth":2},{"value":"Step 1: Log in to GravityZone Control Center","id":"step-1-log-in-to-gravityzone-control-center","depth":3},{"value":"Step 2: Generate an API Key","id":"step-2-generate-an-api-key","depth":3},{"value":"4. Identify your Control Center URL","id":"4-identify-your-control-center-url","depth":2},{"value":"5. Configure the integration","id":"5-configure-the-integration","depth":2},{"value":"6. Supported Operations","id":"6-supported-operations","depth":2},{"value":"7. Known Limitations","id":"7-known-limitations","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/bitdefender-edr-setup","seo":{"title":"Bitdefender GravityZone EDR Provider Configuration Guide"}},"lastModified":"2026-07-10T17:35:28.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/bitdefender-edr-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}