Detection & Response Enablement
Aperçu
Import FortiSIEM incidents into OpenCTI as STIX Incidents (bidirectional import side).
The OpenCTI FortiSIEM Incidents connector imports incidents from FortiSIEM into OpenCTI as STIX Incidents in near real time. It periodically pulls incidents from the FortiSIEM REST API, converts them to STIX 2.1 Incidents (with severity, timestamps and an external reference), and relates extracted network observables (IP addresses, hostnames). Paired with the FortiSIEM stream connector (which pushes IOCs to Watch Lists), it provides a bidirectional integration.
Informations de base
Connecteurs
7.260706.0
7.260706.0
0