Box Integration

Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.

Box

Version: Box.

The Box is a cloud computing business that provides file-sharing, collaborating and other tools for working with files that are uploaded to its servers. Users can determine how their content can be shared with other users.

Netsurion Data Source Integration for Box helps in monitor activities such as file/folder operations, policy violations, administrator, role changes, login failures, etc.

Netsurion data source integration for Box allows you to monitor the following components:

Monitoring security actions such as malicious files detected, login failure, etc.
Monitoring operational activities such as item created, deleted, modified, etc.

After the Box is configured to deliver events to the Netsurion's Open XDR platform, the dashboards and reports can be configured into Netsurion's Open XDR platform.

Some of the Data Source Integrations available in Netsurion are listed below.

Alerts

Type	Name	Description
Security	Box- Malicious file detected	This alert is generated when a file is marked malicious by Box.
Security	Box - Login failure	This alert is generated when login failure occurs.
Security	Box - Change in administrator role	This alert is generated when there is a change in administrators’ roles.
Security	Box - Multiple items deleted in a short duration	This alert is generated when multiple files are deleted in a short amount of time.
Security	Box - Access granted	This alert is generated when new access is granted.
Security	Box - Shield alert	This alert is generated when an attack is detected by the shield feature of the Box.
Operations	Box - Storage expiration	This alert will be generated when the storage license expires.
Compliance	Box - Upload policy violation	This alert is generated when a violation occurs during a file/folder upload.
Compliance	Box - Device trust check failed	This alert is generated when a device fails the trust check.
Compliance	Box - Sharing policy violation	This alert is generated when a violation occurs during a file/folder share.

Reports

Type	Name	Description
Operations	Box - File activities	This report gives information about the file activities such as created, modified, deleted, etc. along with the user information who did these operations.
Operations	Box - Folder activities	This report gives information about the folder activities such as created, modified, deleted, etc. along with the user information who did these operations.

Documentation

The configuration details are consistent with Netsurion's Open XDR platform version 9.x or later, and Box.

Download Integration Guide and How-to Guide for more information and to configuration instructions.