CSE Integrations

In this section, we'll introduce the following concepts:

ThreatQ Source

Learn how to set up a ThreatQ source.

Insight Enrichment Server

Learn how to automatically enrich CSE Insights.

Enable VirusTotal Enrichment

Learn how to enrich Signals based on queries it runs against VirusTotal.

TAXII Feed

Learn how to integrate CSE with a TAXII threat intelligence feed.

Security Incident Response (SIR)

Learn to install and configure the integration between Sumo Logic CSE and ServiceNow's SIR.

Enrichments and Threat Indicators

Learn how enrichments can add threat indicators to show risk level in Insights and Entities.