Table of Contents
Introduction
Use the Recorded Future on Unified Defense SIEM SOAR integration to enrich IOCs with Recorded Future threat intelligence and automatically submit suspicious URLs, domains, and files to the Recorded Future Sandbox for analysis.
Partner Website: https://documentation.securonix.com/bundle/securonix-on-prem-user-guide/page/content/soar-integration-recorded-future.htm.
Prerequisites
- Recorded Future Connect API Token
Installation Steps
- In SNYPR, go to Menu > SOAR > Integrations.
- Search for Recorded Future.
-
Click + Add an instance and configure the following information:
- Name: A textual name for the integration instance
- Token: The API key obtained from Recorded Future
- Server URL: The base URL obtained from Recorded Future
- Enable All Tenants where the instance is applicable.
- Click Test to validate the URLs and connection.
- Click here to see all commands available in Securonix SNYPR Playbooks.
Support
For integration support, please contact support@securonix.com.