How can we help?

Search

Malwarebytes Integration

Netanel Hugi
Netanel Hugi
  • Updated
Torii SMP
Torii Identity

Overview

Torii integrates with Malwarebytes (ThreatDown Nebula) and syncs the users of your Nebula console, with their role and last login time.

  • Supports multiple accounts (one Nebula account per connection).
  • Supports actions: create user, change user role, delete user (beta).
  • Integration Capabilities

Requirements

Accounts & Permissions

  • A Nebula Super Admin user. Only Super Admins can create API credentials.
  • An API client with the read scope to sync users. Add the write scope to use the actions.

Required keys

  • Data center
  • Account ID
  • Client ID
  • Client Secret

How to Generate the Required Values

  1. Log in to the Nebula console as a Super Admin.
  2. In the left navigation pane, click Integrate. In newer consoles this page is under Settings > APIs & Integrations.
  3. Click Add.
  4. In the Create Client window, enter an application name, for example Torii.
  5. Check read. Check write too if you want to use Torii actions.
  6. Click Save.
  7. Copy the Client ID and Client Secret. The secret is shown only once, so store it securely.
  8. Copy your Account ID from the browser address bar while you are in the Nebula console. It is the ID (for example 9256034b-7967-4253-a5d9-260663e4fa4f) that appears in the URL.
  9. Check which data center hosts your Nebula account. Most accounts use the Standard data center. Choose European only if your account was provisioned in the ThreatDown European data center. If you are not sure, ask ThreatDown Support.

How to Connect the Integration

  1. Go to the Integrations page in Torii.
  2. Search for Malwarebytes and click Connect.
  3. Select the Data center, then enter the Account ID, Client ID and Client Secret.
  4. Click Connect.

Notes

  • Torii syncs Nebula console users (the people who sign in to Nebula), not protected endpoints.
  • The Nebula API does not return a user status, so all synced users appear as active.
  • The create user and change role actions give the user access to all groups. You can limit a user's group access in the Nebula console afterwards.


For any further questions, please contact Torii Support.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request