Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update README.md from Partner #2542

Merged
merged 1 commit into from
Aug 27, 2024
Merged

Update README.md from Partner #2542

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions external-import/sekoia/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
# Sekoia CTI Connector

## Objective
Collect Sekoia.io CTI data in an existing self-managed OpenCTI instance for any operational purpose (such as CTI aggregation, dissemination, hunting...).
Collect Sekoia.io CTI data in an existing OpenCTI instance for any operational purpose (such as CTI aggregation, dissemination, hunting...).

## Prerequisites
- An operational OpenCTI instance with administrator privileges
- An active Sekoia.io subscription. It could be a CTI-only subscription ([Sekoia Intelligence](https://www.sekoia.io/en/product/cti/)) or a XDR/SOC platform subscription ([Sekoia Defend](https://www.sekoia.io/en/product/xdr/)) which natively includes Sekoia CTI
- An operational OpenCTI on-prem instance with administrator privileges or an OpenCTI Saas version
- An active Sekoia CTI subscription (Sekoia Intelligence) : https://www.sekoia.io/en/product/cti/. If you want to test Sekoia CTI please contact : contact@sekoia.io
- [Creating a Sekoia.io API KEY](https://docs.sekoia.io/getting_started/manage_api_keys/) with the "View intelligence" premission (at least)

## Configuration
## OpenCTI on-prem version configuration

1. Add the following code to the end of docker-compose.yml file in the OpenCTI docker repository

Expand Down Expand Up @@ -58,6 +58,10 @@ Note:Sekoia connector should be named **connector-sekoia** as described in the p

`docker-compose ps connector-sekoia`

## OpenCTI SaaS version configuration

Contact the Filigran support ([email protected]) to configure the Sekoia CTI connector.

## Sekoia Intelligence in OpenCTI

1. First of all, check if the connector is running and up to date. Go to Sekoia connector Data > Ingestion > Connectors > Sekoia.io
Expand Down