Skip to main content
CylancePROTECT app icon

CylancePROTECT

This app supports the various investigative, containment, and corrective actions on CylancePROTECTBuilt by Splunk LLC
soar product badge
Default Version 2.0.9

August 4, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1, 6.0, 5.5, 5.4, 5.3

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#23 in Endpoint

This app supports the various investigative, containment, and corrective actions on CylancePROTECT

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using the supplied configuration
  • list endpoints: List all the endpoints/sensors configured on the device
  • list threats: Get a list of threats on the specific device
  • get system info: Get information about an endpoint
  • hunt file: Hunt a file on the network using the hash
  • get global list: Retrieve the hashes for the given type of list
  • unblock hash: Unblock a file hash
  • block hash: Block a file hash
  • get file: Download a file to the vault
  • get file info: Get information about a file
  • update zone: Update the details of a zone
  • list policies: Get a list of tenant policies
  • list zones: Get a list of tenant zones