Anomali ThreatStream - Recorded Future Feeds: Getting Started

Table of Contents

• Introduction
• Prerequisites
• Installation Steps
• Support

Introduction

The Anomali ThreatStream Feeds app seamlessly enriches IP addresses, domains, URLs, and file hashes with Recorded Future Intelligence, directly accessible from any detail page in the ThreatStream application. It displays the same intelligence data as seen on Recorded Future Intelligence Cards, providing consistent and actionable insights. Additionally, the integration supports bulk ingestion of indicators from Recorded Future risk lists, streamlining threat management and improving operational efficiency.

Prerequisites

• A valid Recorded Future API Key 
• Access to the Recorded Future Threat Intelligence Module or SecOps Module
• Client is running Anomali Cloud

Installation Steps

1. Go to the Anomali TS App Store and search for ‘Recorded Future’
2. Click the Recorded Future Feed App and Install
3. Input your Recorded Future Anomali Feeds Token under ‘Credentials’ and click ‘Activate’

Support

This is a partner owned integration. For support or more information, please contact support@anomali.com.