Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SAASINT-3331] DDS: Avast: Crawler Integration v1.0.0 #19063

Open
wants to merge 16 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .github/CODEOWNERS
Original file line number Diff line number Diff line change
Expand Up @@ -433,6 +433,10 @@ plaid/assets/logs/ @DataDog/saa
/streamnative/manifest.json @DataDog/saas-integrations @DataDog/documentation
/streamnative/assets/logs/ @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-backend

/avast/ @DataDog/saas-integrations
/avast/*.md @DataDog/saas-integrations @DataDog/documentation
/avast/manifest.json @DataDog/saas-integrations @DataDog/documentation
/avast/assets/logs/ @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-backend
# To keep Security up-to-date with changes to the signing tool.
/datadog_checks_dev/datadog_checks/dev/tooling/signing.py @DataDog/agent-integrations
# As well as the secure downloader.
Expand Down
49 changes: 39 additions & 10 deletions avast/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,36 +2,65 @@

## Overview

[Avast Business Hub][1] is a cloud-based platform that helps businesses easily manage their Avast security solutions. It offers real-time threat monitoring, detailed reporting, and centralized network security control. With its intuitive interface, businesses can effectively safeguard their networks from cyberthreats.
[Avast Business Hub][1] is a cloud-based platform that helps businesses manage their Avast security solutions. It offers real-time threat monitoring, detailed reporting, and centralized security control for endpoints, ensuring comprehensive protection across the network and safeguarding against cyberthreats.

The Avast integration collects the following types of logs:

- **Threat**: This endpoint contains information about devices with detected threats, including the type of threat and detection time.
- **Task**: This endpoint contains a summary of tasks performed on devices, including execution details, progress, and completion status.
- **Patch**: This endpoint contains details about patches for devices, allowing monitoring of the health and security of device software and applications.
- **Audit**: This endpoint contains details about user activities, including changes to policies and user access.

This integration collects logs from the sources listed above and sends them to Datadog for analysis with our Log Explorer and Cloud SIEM products.

* [Log Explorer][2]
* [Cloud SIEM][3]

## Setup

### Configuration
### Generate API credentials in Avast

!!! Add list of steps to set up this integration !!!
1. Log in to [Avast Business Hub][4] Account.
2. Navigate and click the gear(settings) icon.
3. In the **Settings** section, click **Integrations**.
4. Click **Add a new integration**.
5. Provide an integration name.
6. Select Integration scope as **API Gateway**, then click **Generate a secret**.
7. The **Client ID** and **Client Secret** will be generated.

### Validation
### Connect your Avast Account to Datadog

!!! Add steps to validate integration is functioning as expected !!!
1. Add your Client ID and Client Secret
|Parameters|Description|
|--------------------|--------------------|
|Client ID|The Client ID of Avast Business Hub Integration.|
|Client Secret|The Client Secret of Avast Business Hub Integration.|
2. Click the Save button to save your settings.

## Data Collected

### Logs

The Avast integration collects logs and forwards them to Datadog.
The Avast integration collects and forwards security logs to Datadog.

### Metrics

The Avast integration does not include any metrics.

### Service Checks

The Avast integration does not include any service checks.

### Events

The Avast integration does not include any events.

## Troubleshooting

Need help? Contact [Datadog support][2].

[1]: https://www.avast.com/business/business-hub
[2]: https://docs.datadoghq.com/help/
Need help? Contact [Datadog support][5].

[1]: https://www.avast.com/business/business-hub/
[2]: https://docs.datadoghq.com/logs/explorer/
[3]: https://www.datadoghq.com/product/cloud-siem/
[4]: https://businesshub.avast.com/
[5]: https://docs.datadoghq.com/help/
1 change: 1 addition & 0 deletions avast/assets/avast_dark_theme.svg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading