VECTR Integration

Setting up an API Key in VECTR

  1. Login to VECTR with a well-permissioned account. Your user will need the ability to create data in the library and local env.
  2. Navigate to User > Profile and then click the API Keys tab
    VECTR API Key step 1
  3. From here, click the Create API Key button
    VECTR API Key step 2
  4. Save all information from the ensuing dialog to a safe location. You’ll need both the Key ID and Secret for MACAT.
    VECTR API Key step 3

Configuring MACAT

Caution

Make sure you have an Assessment created in VECTR which will contain your MACAT tests. The integration won’t work without an Assessment.

  1. Click the MACAT Settings Icon MACAT Settings Icon
  2. Navigate to the Integrations tab
  3. Fill out the VECTR Hostname and port. The default value doesn’t currently work (bug) so even if you intend to use sravectr.internal:8081, make sure you put it in the field.
  4. Enter the saved Key ID and Secret into the corresponding fields in the VECTR integration form and if you’re running VECTR with an insecure / self-signed certificate like the default installation, you’ll need to toggle the control to turn on allowing these types of certificates.
    VECTR API Key step 3
  5. Next click the Test VECTR Connection button. This will test the connection and then allow you to choose an Assessment target in VECTR.
    Test VECTR Integration
  6. Once the VECTR Connection test completes successfully, you’ll be presented with an option to select an Environment and an Assessment target. Select those now
    Test VECTR Integration
  7. When that’s finished, click save and then you’re ready to send MACAT execution results to VECTR

Sending Results to VECTR

  1. From MACAT’s simulation screen, you can click the Send Results to VECTR button from any completed Execution Log tab
    VECTR API Key step 2
  2. In VECTR, a Campaign will be created with the name of your simulation and the current time and test cases will be added and appropriate time stamps for attack start and stop recorded
    VECTR API Key step 2
  3. Log output can be viewed in the Logs tab of the Automation section in a VECTR Test Case or from the Campaign Actions control on the Campaign screen. Clicking a log will show the output.
    VECTR API Key step 2
    VECTR API Key step 2

Notes

  • Sending data to VECTR will create Campaigns and Test Cases
  • In addition to local Environment Test Cases, it will also create templates for tracking the results of Test Cases over time
  • Also note that if you set up the correct defense tools for your environment in VECTR AND have Defense Tool Types configured in your MACAT procedures, you’ll see the tools pre-populated in VECTR Test Cases and ready for outcome recording
    VECTR Def Tools