Cloud SIEM Integrations

In this section, we'll introduce the following concepts:

Learn how to set up a ThreatQ source.

Learn how to automatically enrich Cloud SIEM insights.

Learn how to enrich signals based on queries it runs against VirusTotal.

Learn how to integrate Cloud SIEM with a TAXII threat intelligence feed.

Learn to install and configure the integration between Sumo Logic Cloud SIEM and ServiceNow's SIR.

Learn how enrichments can add information to signals, entities, and insights.