Connect ShareFile to Elastic Security

Both apps 29ShareFile 19Elastic Security 10

• Trigger
  New Client

  Triggers when a new client user is added to the ShareFile account.

• Action
  Add group

  Creates a new distribution group in ShareFile, optionally shared and with initial member contacts.

• Action
  Add Note

  Creates a note inside a ShareFile folder with a title and optional text.

• Action
  Add share

  Creates a new Send share (sharing files) or Request share (asking recipients to upload into a folder) in ShareFile.

• Action
  Add URL

  Adds a web link (URL) item to a ShareFile folder.

• Action
  Add user

  Creates a new employee user in your ShareFile account and returns the new user.

• Action
  Copy item

  Copies a file or folder into another ShareFile folder.

• Action
  Create Client User

  Creates a new client user in your ShareFile account.

• Action
  Create Folder

  Creates a new folder inside a ShareFile parent folder and returns the new folder.

• Action
  Delete item

  Deletes a file or folder from ShareFile.

• Action
  Find items by name

  Searches ShareFile for files and folders whose name matches the text you enter, and returns the matching items.

• Action
  Get file download link

  Returns a temporary download link for a ShareFile file. For a folder, the link downloads a ZIP archive of its contents.

• Action
  Get item

  Returns a single ShareFile item (file, folder, note or link) by its id.

• Action
  Get user

  Returns a ShareFile user by ID or email address, or the connected user when neither is given.

• Action
  List folder children

  Returns the files, folders, notes and links directly inside a ShareFile folder.

• Action
  List groups

  Returns the distribution groups you have permission to view in your ShareFile account.

• Action
  List shares

  Returns the outstanding Send and Request shares created by the connected ShareFile user.

• Action
  List users

  Returns the employee users in your ShareFile account.

• Action
  Update item

  Updates a ShareFile file, folder, note or link: rename it, change its description or expiration date, or move it to another folder or zone.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.