The Marketplace is Perch’s latest innovation in community-driven threat intelligence, offering users the ability to install carefully researched, Perch-produced Perchybana objects including Dashboards, Visualizations, Event Notifications, and Saved Searches.

The Marketplace also offers users the power to create and share their own Organization’s content publicly and privately.

To get content out to Perch’s flock of users, the Marketplace was developed as a first-of-its-kind, living, and continuously growing vault of Perchybana (Elastic) Objects which user Organizations are highly encouraged to contribute to. Perch loves open source!

The Marketplace is divided into two methods of sharing: Public and Exclusive (a.k.a Private).

• Public:
  • In the Perch Marketplace, your Public Collection is one that your Organization is outwardly and openly sharing with the rest of the user base on Perch. This is meant for Perchybana Objects your Organization has designed that you want to let other members of Perch observe and use. This is best saved for Perchybana Objects you create around some general or specific searching of different logs/Index Patterns but does not contain personally or proprietarily identifiable information of any kind from your Organization.
• Exclusive:
  • Your Organization’s Exclusive Collection is for sharing and installing Perchybana Objects that only you can see. Managed Service Providers can create Exclusive/Private Collections that can Auto-Install objects shared to it to all of their customers in Perch, turning it into an effective “network share” in the Perch portal for Perchybana Objects. No one else has any access to this Exclusive/Private Collection.

1. To access the Marketplace, log in to Perch.
2. On the left side, click on Marketplace.
3. Here, you’ll see two views of the Marketplace module: Explore and Manage.
   1. Explore – This part of the Marketplace is for discovering and installing new Perchybana content pieces from different Collections. Collections represent groupings of content pieces that all revolve around one theme, technology, or larger significant grouping. There are two main views of Explore: Collections and Popular/Search.
      • Use the Collections view to see all Marketplace Collections. You’ll see Collections around Windows, Microsoft 365, Cisco, Auditbeat Linux, AWS, Compliance, ones from Perch’s in-house team, and ones from other Organization’s Public Collections.
      • Use the Popular view to see the six most-installed content pieces across all Perch users, for each Perchybana object type: Dashboards, Visualizations, Event Notifications, Saved Searches.
        • You can use the filter area on the top of the Popular page to do a specified search across all Perchybana objects in the Marketplace. Filter by Add-on/Object Type, whether or not you already have the object installed, and whether objects are Public or Exclusive to your Managed Organization.
        • You can also use the button next to the object type title to show ALL the Perchybana objects of that type.
          • For example, you can click See All next to Dashboards to see all the existing Dashboards on the Perch Marketplace.
   2. Manage – This part of the Marketplace is for sharing any Perchybana Objects with either your Organization and Managed Organizations, or the Public Perch flock and user community.
      1. Click Start Sharing on either your Public or Exclusive Collection to open the Collection’s Details page.
         • If you’ve already created either a Public or Managed Organization (Exclusive) type Collection, you won’t see the Start Sharing button. Instead, use Create Collection to start a new Collection object for your Organization.
         • You will have the following settings to configure:
           • Sharing – what type of Sharing the Collection will be, Public or Managed Organization (Exclusive).
           • Collection name – the effective title for the Collection.
           • Collection description.
         • Scroll down to the Perchybana Object Type sections and choose one to begin Sharing.
           • You can also use the Search Bar in any Object Type section to find what you’re looking for quickly.
         • Find the specific Object you want to share, click the Share icon, and verify the Share in the pop-up window.
           • Performing this Share will effectively pull the Perchybana Object from the account it’s being Shared from and install that version to all members of the Organization that account is a part of, depending on permissions. You can also Auto-Install to all your Managed Organizations.
           • Use the checkmark-style boxes to choose all items or specific items and install the total number of Objects in a group. Use the Share Multiple button in the top right of the Object Type section to Share the Objects all at once.
         • On a Collection’s Details page, open up any Perchybana Objects from any of their object type groupings with the Details button.
           This will open the Object in a new browser tab automatically for you, so you can verify the details of that Dashboard/Visualization/Event Notification/Saved Search.

• Details – this button lives on Collections and opens them up to show all the different Perchybana Objects which that Collection contains.
• Install/Manage – these buttons will be visible depending on whether or not you have the Perchybana Object installed.
  • Install – Clicking this will open a small window, asking you to verify the Install and if you want to Install the Object for all your Managed Organizations.
  • Manage – The Manage window configures whether or not you are using Auto-Install for your Managed Organizations, the total count of how many or your Managed Organizations have that Object, and an Uninstall option.
• Uninstall – Within a Manage window, this button uninstalls an Object from your Organization and from any Managed Organizations you may have been using Auto-Install with.
• See All – Click to see all the Perchybana Objects within that filter/section. Marketplace will only display a certain number of Objects per page section.
• Install – You can choose to Install an entire Collection if you wish, instead of the individual Perchybana Objects it contains. You can also use the Auto-Install function for entire Collections.

• For anything you share Publicly on the Marketplace, ensure that nothing contains personally or proprietarily identifiable information of any kind from your Organization.
• A green Auto-Install notification indicates you are using Auto-Install for your Managed Organizations.
  • Sharing any Perchybana Object to your Organization’s Exclusive Collection will install the Object for every member of that Organization. It would take the configuration of Auto-Install for an MSP to have all of their Objects shared to their Exclusive Collection install for all members of all their customers.
  • You can also use the button next to the object type title to show ALL the Perchybana objects of that type.
    • Example – Click See All next to Dashboards to see all the existing Dashboards on the Perch Marketplace.

The Perch Marketplace will rapidly continue to grow and expand its breadth of knowledge and ability to find threats in your networks. More Organizations have been deciding to open up Public Collections with general use items they have found effective and sharing these with the rest of the flock. Please let us know if there is anything at all we can do to improve your Marketplace experience.