Securonix: Getting Started

Table of Contents

Introduction

Use the Recorded Future on Unified Defense SIEM SOAR integration to enrich IOCs with Recorded Future threat intelligence and automatically submit suspicious URLs, domains, and files to the Recorded Future Sandbox for analysis.

Partner Website: https://documentation.securonix.com/bundle/securonix-on-prem-user-guide/page/content/soar-integration-recorded-future.htm.

Prerequisites

  • Recorded Future Connect API Token

Installation Steps

  1. In SNYPR, go to Menu > SOAR > Integrations.
  2. Search for Recorded Future.
  3. Click + Add an instance and configure the following information:
    • Name: A textual name for the integration instance
    • Token: The API key obtained from Recorded Future
    • Server URL: The base URL obtained from Recorded Future
  4. Enable All Tenants where the instance is applicable.
  5. Click Test to validate the URLs and connection.
  6. Click here to see all commands available in Securonix SNYPR Playbooks.

Support

For integration support, please contact support@securonix.com.

 

This content is confidential. Do not distribute or download content in a manner that violates your Recorded Future license agreement. Sharing this content outside of licensed Recorded Future users constitutes a breach of the terms and/or agreement and shall be considered a breach by your organization.
Was this article helpful?
0 out of 0 found this helpful

Articles in this section

See more