This support page provides details on Field Enabled (Custom) Integrations
Here are some characteristics of these integrations:
Field Enabled (API Access): Client responsible to perform integration (reach out to your PS contact to scope)
-
- We have field experience integrating, but not out-of-the-box turnkey solutions
- Provide API support and any install/configuration information available
-
The client is responsible for the installation, configuration, and troubleshooting
- PS support can be available to assist with these tasks based on Support tier
- It’s highly recommended that the client has internal/external expertise around the product (Recorded Future cannot commit to having experts in these product)
Sales Guidance/ SEISMIC LINK
- Recorded Future is not enabled to demo or POV the below; only POV if the client has access to partner technology with skills around the product and is willing to invest time and effort in testing
-
The escalation paths are:
1. API Support:
Tier 1= SE/Int Serv
Tier 2=Recorded Future Support; Integration Support Ticket Form (preferred) or support@recordedfuture.com
Tier 3= Ticket created by Tier 2 will pull in the following resources if necessary in order as listed:
-Professional Services
-Product Management
-RD/Engineering/Integrations Team
*Support will own the ticket lifecycle
2. If API Checks Have Been Satisfied
-Ask questions in #integrations Slack Channel
-Get Partner on support call with client
The current list of Field Enabled Integrations is as follows (Please reach out to your PS contact to explore ones not listed anywhere):
Partner | Product | Product Category |
CarbonBlack |
CbResponse | EDR/IR |
Elastic (ELK) |
ELK | SIEM |
Graylog |
Graylog | SIEM |
The Hive |
The Hive | IR |
McAfee ESM |
ESM | SIEM |
Slack |
Slack | Messenger |
ZScaler |
ZIA | Network Analysis |