Connect Files.com to Elastic Security

Both apps 33Files.com 23Elastic Security 10

• Trigger
  Automation Run Completed

  Triggered when a run of the selected Files.com automation finishes, whether it succeeded, failed or was canceled. Each run is reported once, after it completes.

• Trigger
  File Deleted

  Triggered when a file or folder is deleted in Files.com. Reports the path that was deleted and who deleted it.

• Trigger
  Group Created

  Triggered when a new group is created in Files.com. Reports the group's name, members and login permissions.

• Trigger
  New File or Folder Created

  Triggered when a file or folder is created in Files.com, whether uploaded, copied or created by an automation. Reports the new path and who created it.

• Trigger
  New File Uploaded

  Triggered when a new file appears in the folder you choose. Reports the file's path, name, size and last-modified time.

• Trigger
  Share Link Created

  Triggered when a new share link is created in Files.com. Reports the link's public address, what it shares and when it expires.

• Trigger
  User Created

  Triggered when a new user is created in Files.com. Reports the user's name, username, email and login permissions.

• Action
  Add User to Group

  Adds an existing Files.com user to a group, optionally as a group administrator. Returns the new group membership, including the group name and the user's username.

• Action
  Copy File

  Copies a file or folder in Files.com to a new path, leaving the original in place. Returns the copy status, plus a migration ID when a large copy continues in the background.

• Action
  Create Folder

  Creates a folder at the given path in Files.com, optionally creating any missing parent folders. Returns the new folder's path, name and creation details.

• Action
  Create Group

  Creates a group in Files.com, optionally with its starting members, group administrators and login-protocol permissions. Returns the new group including its ID.

• Action
  Create Share Link

  Creates a public share link for one or more files or folders in Files.com, optionally password-protected, expiring or use-limited. Returns the link's public address.

• Action
  Delete File

  Deletes a file or folder from Files.com at the given path. Deleting a folder that still has contents requires the recursive option.

• Action
  Delete Folder

  Deletes a folder from Files.com at the given path. Use the recursive option to delete a folder that still has files or subfolders in it.

• Action
  Delete Group

  Deletes a group from Files.com by its ID. The group's members keep their own accounts; only the group is removed.

• Action
  Delete User

  Deletes a user from Files.com by their ID, removing their access to the site.

• Action
  Download File

  Gets a temporary download address for a file in Files.com, along with the file's name, size and checksums. Pass the download address to a later step to fetch or attach the file.

• Action
  List Folder Contents

  Lists the files and folders inside a Files.com folder, with each item's path, name, type, size and last-modified time.

• Action
  Move File

  Moves or renames a file or folder in Files.com to a new path. The original path no longer exists afterwards.

• Action
  Remove User from Group

  Removes a user from a Files.com group. Looks up the membership for the group and user you name, then removes it.

• Action
  Run Automation

  Starts a run of the Files.com automation you choose, the same as pressing Run in Files.com. The run continues in the background.

• Action
  Update User

  Updates a Files.com user's details, login permissions and access settings. Fields you leave blank keep their current values.

• Action
  Upload File

  Uploads a file into Files.com at the path you choose, fetching the bytes from the file's web address. Returns the stored file's path, name and size.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.