Skip to main content

Cyberhaven

Visualize Cyberhaven Endpoints and monitor changes through queries and alerts.

Installation​

Requirements​

  • An account with permissions to fetch Cyberhaven API endpoints.
  • Appropriate permissions in JupiterOne to setup new integration.

Configuration in Cyberhaven​

Authentication​

Cyberhaven uses token-based authentication to secure its API endpoints. To authenticate, you must first create an API key in the Cyberhaven Console and use it to generate a temporary bearer token.

Note: Ensure that you've created a role with the necessary API permissions before proceeding.

Refer to the Cyberhaven documentation for guidance on creating an API role: Creating an API Role

Generate an API Key​
  1. Navigate to Preferences > Users and API keys, then open the API Keys tab.
  2. Click New API Key.
  3. Provide a name to identify the API key.
  4. Select a role from the list.
  5. Specify a validity period (up to one year).
  6. Click Save.
  7. Copy and securely store the generated API key.

Configuration in JupiterOne​

  1. From the JupiterOne Search homepage, navigate to Integrations from the top menu.
  2. Search for Cyberhaven, then select it.
  3. Click Add Instance, then provide the following information:
  • Cyberhaven API Key: Use the key generated in the Generate an API Key section.
  • Cyberhaven Tenant Name: Your tenant's name within Cyberhaven.
  • Account Name: A label for identifying this Cyberhaven instance in JupiterOne. If Tag with Account Name is enabled, this value is stored in tag.AccountName for all ingested entities.
  • Description: (Optional) A brief description to help your team identify this integration.
  • Polling Interval: Choose an appropriate interval for your monitoring needs. You can also select DISABLED to manually execute the integration.
  1. Once all values are entered, click Create Instance.

Next Steps​

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.