CylancePROTECT

CylancePROTECT is an AI-based, Endpoint Protection Platform (EPP) that blocks cyberattacks and provides automated controls for safeguarding against threats like script-based, fileless, memory, and external device-based attacks.

Configuring the Connector for CylancePROTECT

To configure Lucidum to ingest data from CylancePROTECT:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • URL (required): The URL of the Cylance API, for example, https://protectapi.cylance.com

   • Client ID and Secret (required): Cylance API application ID and secret

   • Tenant ID (required): Cylance tenant ID

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.