LogRhythm
Filigranの提供による
Detection & Response Enablement
概要
Streams OpenCTI indicators to LogRhythm list-based detection rules, enabling real-time threat intelligence enforcement across network and endpoint data sources.
This connector allows organizations to feed a LogRhythm lists using OpenCTI knowledge. Note:For a performance reasons, the connector designed to create multiple lists using the base name provided in the configuration LOGRHYTHM_LIST_NAME: opencti and the list in LogRhythm will be like that opencti_Url.It will be better to build a use case for each type.