Threat Stack AppSec Microagents

 

Each Threat Stack Application Security (AppSec) Monitoring project contains one or more microagents. You link a microagent to your application and it displays risk factors in your code base and real time attacks against your application. You name microagents based on your needs. For example, in one project, you could create microagents to monitor each unique environment, such as development, test, and production.

Important

The Threat Stack AppSec microagent is not the same as the Threat Stack Agent. You install the Threat Stack Agent at the host or container level. You install the Threat Stack AppSec microagent as a dependent library in your application.

View Microagents

You view all microagents associated with a project on the Agents screen.

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays and lists all microagents available to you.


    MicroagentList.png

View Microagent ID

You use the microagent ID to start Threat Stack AppSec when your application starts.

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays and lists all microagents available to you.
  3. In the row for the microagent whose ID you need, click the microagent name. The Agent Overview screen displays.


    AgentOverviewScreen.png

  4. In the Production pane, copy string of letters and numbers in the Agent ID field.
Create Microagents

Create a new microagent when you want to monitor a specific environment, microservice, or other area in which your application installs.

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays.
  3. Click the New Agent button.


    NewAgentButton.png

    The Create Agent dialog displays.

    CreateAgentDialog.png

  4. In the Name text field, type a name for the microagent. Threat Stack recommends following your company’s naming conventions.
  5. Click the Save button. The Create Agent dialog closes and you return to the Agents screen. The new microagent displays in the microagent list.


    NewMicroagentShown.png

Edit Microagents

Make changes to a microagent when you want to add chat services, update the microagent description, or deactivate the microagent.

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays.
  3. In the row for the microagent to edit, click the Edit button.


    EditButton.png

    The Edit Agent screen displays.

    EditAgentScreen.png

  4. Make any necessary changes to the project.
  5. Click the Save button. A confirmation message displays at the top of the Edit Agent screen and the changes you made to the microagent immediately take effect.
Delete Microagents

Delete a microagent when you want to remove it from a project.

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays.
  3. In the row for the microagent to edit, click the Edit button.


    EditButton.png

    The Edit Agent screen displays.

    DeleteAgentScreen.png

  4. Click the Delete button. A confirmation message displays at the top of the Edit Agent screen and the microagent is permanently removed from Threat Stack. The deletion is recorded in the Threat Stack Audit Log.
Receive Notifications about Attacks

You can choose to receive notifications about real time attacks against your application in a chat service. Threat Stack AppSec currently integrates with Slack, Google Hangouts, and Hipchat.

Prerequisites

  • An administrator-level account in your preferred chat service
  • The WebHook URL for your preferred chat service

Configure Sending of Attack Notifications

  1. In the left navigation bar, select the Applications tab. In the right view pane, the Projects screen displays and lists all projects available to you.
  2. In the row for project whose microagents you want to display, click the Agents button. In the right view pane, the Agents screen displays.
  3. In the row for the microagent to edit, click the Edit button.


    EditButton.png

    The Edit Agent screen displays.

    ChatServiceIntegration.png

  4. From the ChatOps Provider drop-down menu, select the chat service in which to receive notifications.
  5. In the ChatOps WebHook text field, type or paste your chat service’s integration URL.
  6. Click the Save button. A confirmation message displays at the top of the Edit Agent screen.
  7. Optionally, trigger a situation in which you receive a notification. Confirm your chat service receives the notification.
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request