Skip to content

CONN-3980 Recorded Future - Vendor Requested Changes #4883

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Dec 16, 2024
Merged

CONN-3980 Recorded Future - Vendor Requested Changes #4883

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5071bf3
Vendor requested changes
carlos-castillo-jask Dec 16, 2024
ae8cd29
Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-fr…
jpipkin1 Dec 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ...d-collectors/cloud-to-cloud-integration-framework/stix-taxii-1-client-source.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -114,7 +114,7 @@ Below is a list of Sumo Logic recommended configuration examples for specific th
| Vendor | Notes |
| :-- | :-- |
| <a href="/files/c2c/taxii-1/alien-vault-config.json" target="_blank">AlienVault</a> | Use your API key as the HTTP username and leave the password blank. |
| <a href="/files/c2c/taxii-1/recorded-future-config.json" target="_blank">Recorded Future</a> | Use your API key as the HTTP password and leave the username blank. We recommend you setup both this TAXII 1 feed and the Recorded Future TAXII 2 feed. |
| <a href="/files/c2c/taxii-1/recorded-future-config.json" target="_blank">Recorded Future</a> | Use your API key as the HTTP password and use any non-empty string as username. The Recorded Future TAXII v1 service supports Recorded Future’s [default and large risk lists](https://support.recordedfuture.com/hc/en-us/articles/115008327148-Default-and-Large-Risk-Lists), as well as collections for each risk rule. More information can be found on the [Recorded Future Support portal](https://support.recordedfuture.com/hc/en-us/articles/115004303128-TAXII-V1-service). |

## FAQ

Expand Down
2 changes: 1 addition & 1 deletion ...d-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@ Below is a list of Sumo Logic recommended configuration examples for specific th
| <a href="/files/c2c/taxii-2/cybersixgill-config.json" target="_blank">Cybersixgill</a> | Be sure to specify collection `102` in the configuration. |
| <a href="/files/c2c/taxii-2/dragos-config.json" target="_blank">Dragos</a> |
| <a href="/files/c2c/taxii-2/eclecticiq-config.json" target="_blank">Eclecticiq</a> | |
| <a href="/files/c2c/taxii-2/recorded-future-config.json" target="_blank">Recorded Future</a> | Use your API key as the HTTP password and leave the username blank. We recommend you setup both this TAXII 2 feed and the Recorded Future TAXII 1 feed. |
| <a href="/files/c2c/taxii-2/recorded-future-config.json" target="_blank">Recorded Future</a> | Use your API key as the HTTP password and leave the username blank. Currently, the Recorded Future TAXII v2 service supports Recorded Future’s [default and large risk lists](https://support.recordedfuture.com/hc/en-us/articles/115008327148-Default-and-Large-Risk-Lists). For more specific risk lists based on an individual risk rule, use Recorded Future’s TAXII v1 service. |
| <a href="/files/c2c/taxii-2/palo-alto-unit42-config.json" target="_blank">PaloAlto Unit42</a> | |

## FAQ
Expand Down
2 changes: 1 addition & 1 deletion static/files/c2c/taxii-1/recorded-future-config.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"name":"TAXII 1 RF - IP Large Test",
"name":"TAXII 1 Recorded Future IP Default",
"useBasicAuth":true,
"httpBasicPassword":"--- API KEY HERE ---",
"discoveryURL":"https://api.recordedfuture.com/taxii",
Expand Down
2 changes: 1 addition & 1 deletion static/files/c2c/taxii-2/recorded-future-config.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"name": "Recorded Future Large and Default Collections",
"name": "TAXII 2 Recorded Future Large and Default Collections",
"authType": "Basic",
"basicPassword": "--- API KEY HERE ---",
"ti_version": "2.1",
Expand Down
Loading