Integration Details

Premier Applications

“Premier Applications” are defined as the following integration packages, including access to:

  • Splunk SIEM and SOAR
  • Palo Alto Cortex XSOAR and XSIAM
  • Microsoft Sentinel
  • ServiceNow Security Incident Response, Vulnerability Management
  • IBM QRadar SIEM/SOAR
  • Anomali ThreatStream

Please consult your assigned Recorded Future representative to see if a Premier Application is included as part of your current offering; an additional Premier Applications may be purchased upon request.

Access to our integrations – which are separate from our Premier Applications – may be included in your licensing. These include all integrations listed here, excluding the list above.

Preconfigured Settings

If Premier Applications and/or Integrations are included in your licensing, they are limited to the default Recorded Future configuration settings.

If changes to these settings or customization is desired, a Professional Services engagement may be required, and is not included in your licensing unless purchased separately.

API Access

Access to Recorded Future APIs may be included in your licensing. Data available in the APIs is limited to the data included in Modules purchased. This access is limited to 5,000 API calls per day in total across the below APIs:

  • Connect API
  • Detection Rule API
  • Detection Rule Relation API
  • Entity Match API
  • Identity API
  • Links API
  • List API
  • Playbook Alert API
  • Threat API
  • Analyst Note API