AlienVault® USM Anywhere™

AlienApp for Salesforce Orchestration

As USM Anywhere surfaces events, alarms, and vulnerabilities, your team determines which items require the opening of a new Salesforce case. Rather than manually opening each case in the Salesforce user interface (UI) and entering the relevant alarm, event, or vulnerability information, you can use the AlienApp for Salesforce response actions to automatically create a Salesforce case with the short description and description fields pre-populated with content from your USM Anywhere environment.

Example of alarms generated from the Salesforce AlienApp
Action Function

Create a Salesforce Case

Run this action to generate a new Salesforce case from an alarm, event, response action, or venerability.

Upon execution of a response action, USM Anywhere generates the Salesforce case and passes the associated information to that new incident case.

Note: Before launching a Salesforce response action or creating a Salesforce response action rule, the AlienApp for Salesforce must be enabled and connected to your Salesforce instance. See Configuring the AlienApp for Salesforce for more information.

To view information about these actions in USM Anywhere

  1. In USM Anywhere, go to Data Sources > Integrations.
  2. Click the AlienApps tab.

    Available Apps tab

  3. On the AlienApps page, click the Salesforce tile.

  4. Click the Actions tab to display information for the supported actions.
  5. Click the History tab to display information about the executed actions.