Available Integrations for Recorded Future's API

This is a partial list of our technology integrations, and may be slightly out of date. In particular, these integrations use Recorded Future's API to pull information into a partner's platform. They require a Recorded Future API subscription to enable.  Up to date information about our integration partners is maintained on our public website, www.recordedfuture.com/integrations/

Some abbreviations used:

  • IR = Incident Response
  • SIEM = Security Incident and Event Management
  • SOAR = Security Orchestration and Automation Response
  • TIP = Threat Intelligence Platform
Partner Product Product Category Use Cases Video with Recorded Future Data
Anomali ThreatStream TIP Correlation, Enrichment  
Anomali ThreatStream [Premium integration] TIP Insikt Notes (as Threat Bulletins)  
Brinqa Brinqa Vulnerability management Risklist summary, Enrichment  
Carbon Black Carbon Black Endpoint Protection IP, Domain, Hash risk list  
EclecticIQ EclecticIQ TIP Correlation, Enrichment  
Exabeam Incident Response IR Enrichment  
IBM QRadar SIEM Correlation, Enrichment Video in Recorded Future University
IBM Resilient IR Enrichment Video in Recorded Future Data
IBM X-Force Exchange Threat Intelligence Exchange Enrichment  
King & Union Avalon Deep Analysis Enrichment Video in Recorded Future University
LogRhythm LogRhythm SIEM Correlation, Enrichment Video in Recorded Future University
Maltego Maltego Deep Analysis Entity transformations Video in Recorded Future University
McAfee Enterprise Security Manager SIEM Correlation  
Microfocus ArcSight SIEM Correlation, Enrichment

 

Microsoft Azure Sentinel Cloud Platform Security

Alerts from Recorded Future,

Correlation, Enrichment

 
MISP MISP TIP Correlation, Enrichment  
Palo Alto Networks XSOAR SOAR Various automated workflows, including alerts from Recorded Future  
Palo Alto Networks Minemeld TIP Threat Intelligence collection, aggregation, and distribution Video in Recorded Future University
Polarity Polarity Enrichment Tool Enrichment  
Protectwise Protectwise Network Analysis Enrichment Video in Recorded Future University
RSA Archer GRC Third-Party Risk Video in Recorded Future University
RSA Archer GRC Vulnerability management  
RSA Netwitness SIEM Correlation  
ServiceNow Third-Party Risk Management Vendor and business partner portfolio management Third-Party Risk Video in Recorded Future University
ServiceNow Security Operations: Security Incident Response and Threat Intelligence Incident Response

Alerts from Recorded Future, Enrichment,

Risk lists

Video in Recorded Future University
ServiceNow Security Operations: Vulnerability Response Vulnerability Management Patch Prioritization, Enrichment Video in Recorded Future University
Splunk  Splunk Enterprise SIEM Correlation, Enrichment, Alerts from Recorded Future Video in Recorded Future University
Splunk Splunk ES SIEM Correlation, Enrichment, Alerts from Recorded Future Video in Recorded Future University
ThreatConnect ThreatConnect TIP Correlation, Enrichment (Playbook and automation integration priced separately)  
ThreatQuotient ThreatQ TIP Correlation, Enrichment  
Versive Versive Security Engine (VSE) Network Analysis Enrichment