ThreatQ Supported
Trellix ESM Connector
The integration uses the Trellix ESM API to upload indicators to watchlists based on at least one user-defined saved ThreatQ Threat Library search. These searches are used to keep the data within the Trellix ESM watchlists fresh, and it ages out stale data with every execution.
Version
1.0.0Categories
SIEM & Log
Elastic Operation
The Elastic Operation enriches submitted system objects with information found in Elastic Security. Elastic Security unifies SIEM, endpoint security, and cloud security on an open platform, arming SecOps teams to protect, detect, and respond at scale. These analytical and protection capabilities, leveraged by the speed and extensibility of Elasticsearch, enable analysts to defend their organization from threats before damage and loss occur.
Version
1.0.1Categories
Enrichment & Analysis,Commercial Intelligence,SIEM & Log
Elastic Security CDF
The Elastic Security CDF allows the automatic ingestion of alerts and cases from Elastic Security into ThreatQ. This enables analysts in ThreatQ to stay up to date with the latest alerts and cases, as well as enabling platform to re-prioritize indicators based on sightings. Elastic Security unifies SIEM, endpoint security, and cloud security on an open platform, arming SecOps teams to protect, detect, and respond at scale. These analytical and protection capabilities, leveraged by the speed and extensibility of Elasticsearch, enable analysts to defend their organization from threats before damage and loss occur.
Version
1.0.2Categories
Commercial Intelligence,SIEM & Log
Elastic Action
The Elastic Action integration enriches indicators with information found in Elastic Security. Elastic Security unifies SIEM, endpoint security, and cloud security on an open platform. This allows SecOps teams to protect, detect, and respond at scale. These analytical and protection capabilities, leveraged by the speed and extensibility of Elasticsearch, enable analysts to defend their organization from threats before damage and loss occur.