Code42 Incydr and JupiterOne integrations and automations

Seamlessly connect Code42 Incydr and JupiterOne. Automate workflows, and boost efficiency with Workato.

Rating

4.9

Pre-built

150+

integrations

Total

100+

active users

avg

2 min

to connect

Custom Connections

Available

via HTTP connector

Market leaders run on Workato

  • monday.svg
  • box.svg
  • hp-2.svg
  • atlassian.svg
  • cisco.png

Build Powerful Workflows, fast

Triggers

When this happens…

Code42 Incydr
  • New Alerts
    Checks for new alerts.
  • New File Events
    Checks for new file events from your saved search query.

    • Any other trigger you can think up

Actions

Do this…

Code42 Incydr
  • Add to legal hold matter
    Add to legal hold matter in Code 42
  • Add users to watchlist
    Add users to watchlist in Code 42
  • Block user
    Block user in Code 42
  • Create case
    Create case in Code 42
  • Create user
    Create user in Code 42
  • Create watchlist
    Create watchlist in Code 42
  • Custom action
    Custom action in Code42
  • Deactivate user
    Deactivate user in Code 42
  • Get alert details
    Get alert details in Code 42
  • Get all watchlist members
    Get all watchlist members in Code 42
  • Get all watchlists
    Get all watchlists in Code 42
  • Get detection list profile
    Get detection list profile in Code 42
  • Get user risk profile
    Get user risk profile in Code 42
  • Get users on watchlist
    Get users on watchlist in Code 42
  • Get watchlist
    Get watchlist in Code 42
  • Get watchlist member
    Get watchlist member in Code 42
  • Reactivate user
    Reactivate user in Code 42
  • Remove departing employee
    Remove departing employee in Code 42
  • Remove from legal hold matter
    Remove from legal hold matter in Code 42
  • Remove high risk employee
    Remove high risk employee in Code 42
  • Remove users from watchlist
    Remove users from watchlist in Code 42
  • Search file events
    Search file events in Code 42
  • Unblock user
    Unblock user in Code 42
  • Update alert state
    Update alert state in Code 42
  • Update case
    Update case in Code 42
  • Update detection list user notes
    Update detection list user notes in Code 42
  • Update user risk profile end date
    Update user risk profile end date in Code 42
  • Update user risk profile notes
    Update user risk profile notes in Code 42
  • Update user risk profile start date
    Update user risk profile start date in Code 42

    • Any other action you can think up

JupiterOne
  • Create Graph Entity
    Creates a new entity in JupiterOne using the GraphQL createEntity mutation. Use the scope parameter to prevent managed integrations from creating duplicate entities.
  • Create Graph Relationship
    Creates a new relationship between two entities in JupiterOne using the GraphQL createRelationship mutation.
  • Download Dashboard PDF
    Downloads the rendered dashboard PDF bytes from a signed storage URL (from Get Latest Dashboard PDF Notification) and returns base64-encoded content suitable for email attachment steps.
  • Evaluate Rule
    Triggers an immediate evaluation of a JupiterOne alert rule using the GraphQL evaluateRuleInstance mutation. Evaluation runs asynchronously; the action returns the rule id when the evaluation has been accepted.
  • Evaluate Smart Class
    Triggers an immediate evaluation of a JupiterOne Smart Class using the GraphQL evaluateSmartClassRule mutation. By default evaluation runs asynchronously and the action returns when the evaluation has been accepted. Enable poll_for_completion to poll within Workato's per-action time limit (~150s); for longer evaluations use Get Smart Class Evaluation Status in a recipe repeat loop with fail_if_pending=false.
  • Execute J1QL Query
    Execute J1QL query using deferred response.
  • Export Dashboard PDF
    Invokes the invokeExportDashboardPdf GraphQL mutation. PDF rendering happens asynchronously server-side; pair with Get Latest Dashboard PDF Notification to retrieve the download link when ready.
  • Get Latest Dashboard PDF Notification
    Polls inAppNotifications for topic DASHBOARD_PDF_DOWNLOAD_SUCCESS, matching the configured dashboard name in body.message within a recency window. Returns the newest matching notification downloadLink.
  • Get Smart Class Evaluation Status
    Returns the current Smart Class rule evaluationStep and lastEvaluationEndOn from a single GraphQL query. Use in recipe repeat loops to wait for long-running evaluations without exceeding Workato per-action time limits.
  • List Integration Jobs
    Lists integration jobs for a JupiterOne integration instance using the GraphQL integrationJobs query. Use size=1 to fetch the most recent job (useful for detecting COMPLETED after sync finalize).
  • Update Graph Entity
    Updates an existing JupiterOne graph entity using the GraphQL updateEntityV2 mutation. Provide the entity _id and a JSON object of properties to add or update.

    • Any other action you can think up

One platform

  • Power
  • Agility
  • Speed
  • Innovation