OTHER THREAT INTELLIGENCE CASE STUDIES
Office 365 integration with Threat Intelligence Platform
GitHub integration with Threat Intelligence Platform
Okta integration with Threat Intelligence Platform
Qualys integration with Threat Intelligence Platform
Symantec DeepSight integration with Threat Intelligence Platform
GSuite Monitoring Solution (Google Reporting) integration with Threat Intelligence Platform
Categories
Customer
Customer’s Threat Intelligence platform enriches every stage of your security operations workflow from your trusted and relevant data sources.
Requirement
The Client requested for the integration of their Threat Intelligence platform with the LogRhythm so that their clients can view the Indicators of Compromise (IOC) data in LogRhythm’s console
Technology Solution
Sacumen developed the Powershell based agent app
Powershell Agent used a configuration file in the Agent’s config folder to configure the Client’s URL, API Key and other required configuration parameters.
Powershell Agent made REST calls to Client’s platform to retrieve events data in CSV format.
Powershell Agent parsed the data and write in LEEF format
Events mapping was done against the LogRhythm field and custom events were defined
info@sacumen.com
+91 80 4976 5878
There are no reviews yet.