Detection & Response Enablement
Aperçu
Push IOCs from OpenCTI to a FortiSIEM Watch List in real time.
The OpenCTI FortiSIEM connector synchronises indicators of compromise from OpenCTI to a FortiSIEM Watch List in real time. Leveraging OpenCTI live streams, IPv4/IPv6 addresses, domain names, URLs and file hashes are added as Watch List entries through the FortiSIEM REST API, so rules and analytics can match events against the threat intelligence curated in OpenCTI. Entries expire automatically through the configured age-out.
Informations de base
Connecteurs
7.260706.0
0