search

trellix-enterprise / mvision-edr-activity-feed

A command line tool to consume and subscribe to DXL events from MVISION EDR
Apache License 2.0
11 stars 18 forks source link

forbidden error #50

Open eldawt opened 2 years ago

eldawt commented 2 years ago

Hello, I am receiving forbidden errors when testing EDR endpoints with the mvision_edr_creds_generator client and secret.

Does anyone know if the creds generator will work with the developer portal APIs https://www.mcafee.com/enterprise/en-us/solutions/mvision/developer-portal.html?

msilvaca-trellix commented 2 years ago

Hi eldawt,

You have to use the --preprod switch to generate credentials to the dev environment.

eldawt commented 2 years ago

Hi eldawt,

You have to use the --preprod switch to generate credentials to the dev environment.

Thank you for your reply msilvaca-trellix, I am testing in a US west tenant that is production when I receive the errors.

eldawt commented 2 years ago

I may need to use the credentials created via API Access Management instead of the mvision_edr_creds_generator