FortiSIEM Incidents
自動配備
コミュニティの提供による
Detection & Response Enablement
概要
Import FortiSIEM incidents into OpenCTI as STIX Incidents (bidirectional import side).
The OpenCTI FortiSIEM Incidents connector imports incidents from FortiSIEM into OpenCTI as STIX Incidents in near real time. It periodically pulls incidents from the FortiSIEM REST API, converts them to STIX 2.1 Incidents (with severity, timestamps and an external reference), and relates extracted network observables (IP addresses, hostnames). Paired with the FortiSIEM stream connector (which pushes IOCs to Watch Lists), it provides a bidirectional integration.
基本情報
コネクター
7.260706.0
7.260706.0
0