...
CTCI curates a CEWL (CVE Early Warning List) that threat actors are currently using or about to use.
Devo collector features
Feature | Details |
|---|---|
Allow parallel downloading ( |
|
Running environments |
|
Populated Devo events |
|
Flattening preprocessing |
|
Allowed source events obfuscation |
|
Data sources
Data source | Description | API endpoint | Collector service name | Devo table | Data source |
|---|---|---|---|---|---|
1 | CEWL |
|
|
|
|
For more information on how the events are parsed, visit our page.
...
| Info |
|---|
This minimum configuration refers exclusively to those specific parameters of this integration. There are more required parameters related to the generic behavior of the collector. Check setting sections for details. |
Setting | Details |
|---|---|
| Required |
| Info |
|---|
See the Accepted authentication methods section to verify what settings are required based on the desired authentication method. |
Accepted authentication methods
Setting | Details |
|---|---|
| The CTCI API token copied from the admin portal. |
Run the collector
Once the data source is configured, you can either send us the required information if you want us to host and manage the collector for you (Cloud collector), or deploy and host the collector in your own machine using a Docker image (On-premise collector).
...
| Expand | ||
|---|---|---|
| ||
To check the memory usage of this collector, look for the following log records in the collector which are displayed every 5 minutes by default, always after running the memory-free process.
|
Change log for v1.x.x
Release | Released on | Release type | Details | Recommendations | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
| New collector |
|