The Samdesk CDF integration enables ThreatQ to ingest alerts and event intelligence from Samdesk Search Streams via the Samdesk API. It transforms Samdesk data, including event details, locations, tags, updates, and proximity information, into structured ThreatQ Events and Event Attributes, providing additional real-world context for threat intelligence workflows.

The integration provides the following feed:

• Samdesk Alerts - ingests alert and event data from configured Samdesk Search Streams into ThreatQ, including event details, locations, tags, updates, and proximity information.

The integration ingests event and event attributes into the ThreatQ platform.