Data & Integrations
SOAR Integrations & API
Webhooks, API keys and a unified SOAR timeline.
Available as a standalone module · Add to my package42Sources
3.2MEvents today
19 / 19Healthy
- REST API with OpenAPI docsActive
- Signed webhooks and retriesActive
- SOAR timelineActive
- Scoped API keysActive
What it does
Connect external SOAR and ticketing tools with API keys and signed webhooks, and follow every automated step on one timeline. OpenAPI docs included.
REST API with OpenAPI docs
Signed webhooks and retries
SOAR timeline
Scoped API keys
How it worksin three steps.
Connect
Add a source with syslog, an agent, an API token or a file upload.
Normalise
Parsers detect the format and map every event to one schema.
Route
Events flow to detection, search, reports and your SOAR tools.
Works best withthese modules.
See all 30 modules
Investigation & Forensics
Log Explorer
Search billions of events in milliseconds.
Learn more Threat IntelligenceDetection Rules
Manage SIGMA and YARA rules, or write your own.
Learn more Automation & AISOC Automation
Visual flows from detection to response.
Learn moreAlso in Data & Integrations
Ready to see it on your own data?
A 30-minute walkthrough with an engineer, tailored to your environment.