Ingesting Ironscales alerts into SecOps

Question

Hi,We want to fetch Ironscales alerts into our SecOps instance. When I visit the Google Chronicle integrations page, it redirects me to the documentation below, but I don't see an actual connector available to configure:https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/ironscalesThe question is: How do we actually ingest these alerts from Ironscales into SecOps if the connector isn't appearing in the integration?Thank you!

cmorris · Answer

Not all SOAR integrations will have a connector, it looks like this one does not. To get the alerts, you could create a custom connector, ingest to the SOAR via Webhook, or send the logs to the SIEM and create a detection rule that will trigger an alert from them.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded