Jun 12, 2025
1.0.0
ThreatQ versions >= 4.35.0
Trellix MVISION Cloud CDF
Overview
The Trellix MVISION Cloud CDF for ThreatQ allows a user to ingest indicators, events, and event attributes into the ThreatQ platform.
The integration provides the following feed, which utilizes two supplemental feeds to retrieve and ingest data into ThreatQ.
- Trellix MVISION CloudTrellix
- Trellix MVISION Cloud - Auth (Supplemental) - retrieves the access_token and tenantID.
- Trellix MVISION Cloud - Object (Supplemental) - retrieves Events data.