Code42

Code42 provides simple, fast detection and response to everyday data loss from insider threats by focusing on customer data on endpoints and the cloud

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• on poll: Callback action for the on_poll ingest functionality
• add departing employee: Add a departing employee to the departing employees detection list
• remove departing employee: Remove a departing employee from the departing employees detection list
• list departing employees: Returns a list of users who are on the departing employees list
• get departing employee: Get a departing employee
• add highrisk employee: Add a high risk employee to the high risk employees detection list
• remove highrisk employee: Remove a high risk employee from the high risk employees detection list
• list highrisk employees: Returns a list of users who are on the high-risk employees list
• get highrisk employee: Get a high risk employee
• add highrisk tag: Add a risk tag to a user
• remove highrisk tag: Remove a risk tag from a user
• get alert details: Get alert details
• search alerts: Search Alerts
• set alert state: Set the state of the alert
• list users: List all users
• create user: Create a new Code42 user account
• block user: Blocks a user from accessing their Code42 account
• deactivate user: Deactivates user's Code42 account
• reactivate user: Reactivates a deactivated user's Code42 account
• unblock user: Unblocks a user, allowing access to their Code42 account
• get user profile: Get user profile
• add legalhold custodian: Add a user (custodian) to a legal hold matter
• remove legalhold custodian: Remove user (custodian) from a legal hold matter
• create case: Create a Code42 case
• update case: Update the details of a case
• close case: Change the status of a Code42 case to 'CLOSED'
• list cases: List Code42 Cases
• add case event: Associates a file event with a Code42 case
• hunt file: Searches Code42 for a backed-up file with a matching hash and downloads it
• run query: Search for Code42 file events
• run advanced query: Run an advanced query using JSON