FortiSIEM Incidents
Automatic deploy
Supported by community
Detection & Response Enablement
Overview
Import FortiSIEM incidents into OpenCTI as STIX Incidents (bidirectional import side).
The OpenCTI FortiSIEM Incidents connector imports incidents from FortiSIEM into OpenCTI as STIX Incidents in near real time. It periodically pulls incidents from the FortiSIEM REST API, converts them to STIX 2.1 Incidents (with severity, timestamps and an external reference), and relates extracted network observables (IP addresses, hostnames). Paired with the FortiSIEM stream connector (which pushes IOCs to Watch Lists), it provides a bidirectional integration.
Basic information
Connectors
7.260706.0
7.260706.0
0