Monitor Salesforce
The Tenable Log Correlation Engine Web Query Client queries the Salesforce REST API in order to monitor login events, as well as the creation and modification of user accounts. These events can be viewed in Tenable Security Center and used to identify irregular activity in Salesforce from unexpected sources. In order to monitor Salesforce events, you must create a connected app, and configure the Web Query Client policy to make calls to the Salesforce API. Additionally, you can limit the number of calls the Web Query Client will make to the Salesforce API to respect subscription limits, and monitor the hardware statistics of the host where the Web Query Client is installed.