Trellix ePolicy Orchestrator
by Trellix
Central console for Trellix (formerly McAfee Enterprise) endpoint security; APIs return devices, threat events, detections and policies.
- Category
- IT, Security & Monitoring
- Type
- Endpoint security
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- OAuth 2.0, API key
02Data
What you can sync.
- Devices
- Threat events
- Detections
- Policies
- Tags
Join Trellix ePolicy Orchestrator devices with assets and people data to see risk by team, system and owner.
Need more? Name any other Trellix ePolicy Orchestrator data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- OAuth 2.0 (client ID, client secret, refresh token)
- An API key
Trellix ePolicy Orchestrator uses OAuth 2.0 (client ID, client secret, refresh token) or an API key. You add the credentials once, when the AI asks for them, and it tells you where to create them in Trellix if you need help.
04How it works
How it works in DataMind.
-
Pick Trellix ePolicy Orchestrator.
Open Lake, pick Trellix ePolicy Orchestrator in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the Trellix ePolicy Orchestrator API docs.
-
Answer a few questions.
The AI reads the Trellix ePolicy Orchestrator documentation, then asks which credentials you will use, which data to sync (for example devices and threat events), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then Trellix ePolicy Orchestrator data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.