Table of Contents | ||||||
---|---|---|---|---|---|---|
|
...
Security Operations: Providing intel into SIEM / SOAR platforms.
Standalone Threat Intelligence: An extension of Security Operations providing context and enrichment of known and emerging threats/incidents.
Brand Intelligence: Monitoring an organization’s external exposure.
Vulnerability Management: Intelligence into the prioritization of threats.
Third party intelligence: Data from third-party sources.
Geo-political: More focussed on nation-state attacks and threat indicators.
...
Here you find the necessary steps to enable the collection.
Steps | Screenshots | |
1 | Login to your Recorded Future account. Open the Menu in the upper-right corner and select the option User Settings. | |
2 | Select the API Access tab. To create a new API token, click on Generate New API Token. | |
3 | Enter a name for the token in the Name field. Then click on Generate. | - |
4 | Select Devo from the drop-down integration list | - |
5 | Click on the Generate new API token button. The new API token appears in the table below. Make a note of the token value as this is required for the ingest Configuration. |
- |
...