CaveloInstall

Summary

Perform security analysis on access audit events filtered by threat level and selected security indicators, optionally including a comprehensive risk assessment and scoring.

Inputs

• Threat Level — Filter audit events by threat severity: Critical, High, Medium, or Low, determining which actions are included in the analysis.
• Security Indicators — Select one or more indicators to focus the analysis on, such as Data Exfiltration, Privilege Escalation, Lateral Movement, Off-Hours Access, and External Access.
• Include Risk Assessment — Boolean option to include detailed risk assessment and scoring in the analysis results.

Output shape

A list of access audit event objects, each enriched with calculated properties including security risk scores, threat indicator flags, risk assessment details (if requested), and remediation priority level.

The returned data is paginated up to the specified limit parameter with default 100 entries. Each event includes computed fields evaluating threat indicators based on the input filters. Remediation priority is derived from the security risk score and threat level.