>

Available Integrations for Recorded Future's API

This is a partial list of our technology integrations, and may be slightly out of date. In particular, these integrations use Recorded Future's API to pull information into a partner's platform. They require a Recorded Future API subscription to enable.  Up to date information about our integration partners is maintained on our public website, www.recordedfuture.com/integrations/

Some abbreviations used:

  • IR = Incident Response
  • SIEM = Security Incident and Event Management
  • SOAR = Security Orchestration and Automation Response
  • TIP = Threat Intelligence Platform
Partner Product Product Category Use Cases Video with Recorded Future Data
Anomali ThreatStream TIP Correlation, Enrichment  
Anomali ThreatStream [Premium integration] TIP Insikt Notes (as Threat Bulletins)  
Brinqa Brinqa Vulnerability management Risklist summary, Enrichment  
Carbon Black Carbon Black Endpoint Protection IP, Domain, Hash risk list  
ÉclectiqueIQ ÉclectiqueIQ TIP Correlation, Enrichment  
Exabeam Incident Response IR Enrichment  
IBM QRadar SIEM Correlation, Enrichment Video in Recorded Future University
IBM Resilient IR Enrichment Video in Recorded Future Data
IBM X-Force Exchange Threat Intelligence Exchange Enrichment  
Roi et Union Avalon Deep Analysis Enrichment Video in Recorded Future University
LogRhythm (Rythme de journal) LogRhythm (Rythme de journal) SIEM Correlation, Enrichment Video in Recorded Future University
Maltego Maltego Deep Analysis Entity transformations Video in Recorded Future University
Mcafee Enterprise Security Manager SIEM Correlation  
Microfocus ArcSight (en anglais seulement) SIEM Correlation, Enrichment

 

Microsoft Azure Sentinel Cloud Platform Security

Alerts from Recorded Future,

Correlation, Enrichment

 
MISP MISP TIP Correlation, Enrichment  
Réseaux de Palo Alto XSOAR SOAR Various automated workflows, including alerts from Recorded Future  
Réseaux de Palo Alto Minemeld TIP Threat Intelligence collection, aggregation, and distribution Video in Recorded Future University
Polarité Polarité Enrichment Tool Enrichment  
Protectwise Protectwise Network Analysis Enrichment Video in Recorded Future University
RSA Archer GRC Third-Party Risk Video in Recorded Future University
RSA Archer GRC Vulnerability management  
RSA Netwitness SIEM Correlation  
ServiceNow (en anglais seulement) Third-Party Risk Management Vendor and business partner portfolio management Third-Party Risk Video in Recorded Future University
ServiceNow (en anglais seulement) Security Operations: Security Incident Response and Threat Intelligence Incident Response

Alerts from Recorded Future, Enrichment,

Risk lists

Video in Recorded Future University
ServiceNow (en anglais seulement) Security Operations: Vulnerability Response Vulnerability Management Patch Prioritization, Enrichment Video in Recorded Future University
Splunk (en anglais seulement)  Splunk Entreprise SIEM Correlation, Enrichment, Alerts from Recorded Future Video in Recorded Future University
Splunk (en anglais seulement) Splunk ES SIEM Correlation, Enrichment, Alerts from Recorded Future Video in Recorded Future University
ThreatConnect (en anglais seulement) ThreatConnect (en anglais seulement) TIP Correlation, Enrichment (Playbook and automation integration priced separately)  
Quotient de menace ThreatQ TIP Correlation, Enrichment  
Versive Versive Security Engine (VSE) Network Analysis Enrichment