Current + Kaseya MDR (RocketCyber) integration
How many of each customer's endpoints the SOC watches, what it caught, and the Microsoft 365 events and automatic responses waiting on you.
Current connects to RocketCyber, the managed SOC behind Kaseya MDR, and puts each customer's SOC posture on the company page and in business reviews: how many endpoints are under watch, how many security apps are enabled, and what the SOC caught. An optional Kaseya API key adds the Microsoft 365 events and automatic responses waiting for your approval.
What Current reads
- Managed agents and enabled security apps per customer.
- Open incidents by severity, and 90 days of incident activity.
- With a Kaseya API key: Microsoft 365 events and the automatic responses that need a decision.
Current stores rolled-up counts per customer, not every incident, and refreshes every 6 hours.
Read only, with one exception you control
RocketCyber's Customer API has no write endpoints, and every request passes a guard that allows only the reads Current needs. The Microsoft 365 account actions on a Service Desk (Beta) ticket are off until an admin turns them on.
Connect it
An admin generates a Customer API token in RocketCyber and pastes it into Current. The token is stored server-side and never shown again; to rotate it, generate a new one and paste it in.