FortiSIEM
Automatic deploy
Supported by community
Detection & Response Enablement
Overview
Push IOCs from OpenCTI to a FortiSIEM Watch List in real time.
The OpenCTI FortiSIEM connector synchronises indicators of compromise from OpenCTI to a FortiSIEM Watch List in real time. Leveraging OpenCTI live streams, IPv4/IPv6 addresses, domain names, URLs and file hashes are added as Watch List entries through the FortiSIEM REST API, so rules and analytics can match events against the threat intelligence curated in OpenCTI. Entries expire automatically through the configured age-out.
Basic information
Connectors
7.260706.0
7.260706.0
0