- 29 Jan 2023
- 1 Minute to read
- DarkLight
BlackBerry Cylance
- Updated on 29 Jan 2023
- 1 Minute to read
- DarkLight
To use Cylance steps in Torq workflows, you have to create a Torq app in Cylance with the requisite permissions. The application generates an application ID and application secret. You'll save both of these in Torq and pass them to generate a bearer token to start a session in Cylance. The bearer token is then passed to authenticate the Cylance steps in the workflow.
Create a Torq app in Cylance
Only administrators can create an application integration in Cylance.
- Log in to your Cylance console as an administrator.
- Select Settings > Integrations.
- Click Add Application.
- In the Application Name field, type a meaningful application name, such as Torq App.
- Select the access privileges for the actions you want to be able to take from Torq workflows.
- Click Save.
- Copy the Application ID and Application Secret. You'll need these later in Torq.
Use Cylance steps in a workflow
In Torq you'll create two Custom Secret integrations, one for the application ID and one for the application secret. Data stored in the Custom Secret integration are accessible in workflows using $.secrets.<secret_name>
. Since the secrets contain sensitive data they are not displayed in the UI.
- Go to the Integrations page, search for Custom Secrets, and click New.
- In the Secret key field, enter a meaningful name for the application ID, such as
cylance-appid
. - In the Secret value field, enter the actual application ID.
- Click Add.
- Repeat steps 1-4 to create a custom secret integration for the application secret.
6. You'll specify these credentials when using Cylance steps in a workflow using the$.secrets
expression.
Premade steps
These are the premade steps for Cylance. Don't see the step you need? No problem, you can easily create custom steps.
- Generate a bearer token
- Get device details by hostname
- Get device details by ID
- Get device details by MAC address
- Get policy details by ID
- List devices
- List policies
- Update a device