USM Anywhere™

AlienApp for Salesforce Orchestration

As USM Anywhere surfaces events, alarms, and vulnerabilities, your team determines which items require the opening of a new Salesforce case. Rather than manually opening each case in the Salesforce user interface (UI) and entering the relevant alarm, event, or vulnerability information, you can use the AlienApp for Salesforce response actions to automatically create a Salesforce case with the short description and description fields pre-populated with content from your USM Anywhere environment. The following table lists the available actions from the AlienApp.

Actions for the AlienApp for Salesforce
Action Function

Create a Salesforce Case

Run this action to generate a new Salesforce case from an alarm, event, response action, or vulnerability.

Upon execution of a response action, USM Anywhere generates the Salesforce case and passes the associated information to that new incident case.

Note: Before launching a Salesforce response action or creating a Salesforce response action rule, the AlienApp for Salesforce must be enabled and connected to your Salesforce instance. See Configuring the AlienApp for Salesforce for more information.

To view information about these actions in USM Anywhere

  1. In USM Anywhere, go to Data Sources > AlienApps.
  2. Click the Available Apps tab.
  3. Search for the AlienApp, and then click the tile.
  4. Click the Actions tab to display information for the supported actions.
  5. Click the History tab to display information about the executed orchestration actions.