FortiSIEM
自動配備
コミュニティの提供による
Detection & Response Enablement
概要
Push IOCs from OpenCTI to a FortiSIEM Watch List in real time.
The OpenCTI FortiSIEM connector synchronises indicators of compromise from OpenCTI to a FortiSIEM Watch List in real time. Leveraging OpenCTI live streams, IPv4/IPv6 addresses, domain names, URLs and file hashes are added as Watch List entries through the FortiSIEM REST API, so rules and analytics can match events against the threat intelligence curated in OpenCTI. Entries expire automatically through the configured age-out.
基本情報
コネクター
7.260706.0
7.260706.0
0