Skip to content

Commit eee6c91

Browse files
authored
[OpenCTI] doc: improve integrations library with new integrations (#23)
1 parent c32631f commit eee6c91

4 files changed

Lines changed: 44 additions & 29 deletions

File tree

-22.9 KB
Binary file not shown.
52.7 KB
Loading
Lines changed: 43 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1,68 +1,77 @@
1-
# OpenCTI Integration Feeds Library
1+
# OpenCTI Integrations Library
22

3-
A comprehensive library of integration feeds is available on the XTM Hub,
4-
providing seamless access to curated threat intelligence data.
5-
Currently, the library focuses on CSV Feeds and Connectors that can be directly deployed to OpenCTI platforms and created by our Filigran Team.
3+
A comprehensive library of Integrations is available on the XTM Hub, providing seamless access to curated threat intelligence data.
64

7-
![Integration feeds library](../assets/images/integration-feeds-lib.png)
5+
Currently, the library proposes CSV Feeds, TAXII Feeds, OpenCTI Streams, Third Party Integrations and Connectors.
6+
Depending on the type of Integration, you can either use One Click Deploy or download and import it to OpenCTI platforms.
7+
8+
![Integrations library](../assets/images/integration-feeds-lib.png)
89

910
## Overview
1011

11-
The XTM Hub integration feeds library represents a significant advancement in threat intelligence accessibility.
12-
The library features pre-built CSV Feeds and Connectors that have been curated by the Filigran team,
12+
The XTM Hub Integrations library represents a significant advancement in threat intelligence accessibility.
13+
The library features pre-built Integrations that have been curated by the Filigran team,
1314
ensuring high-quality, relevant threat intelligence data.
15+
1416
Organizations can benefit from one-click deployment capabilities that integrate directly with registered OpenCTI platforms,
1517
while maintaining completely free access without any cost barriers.
16-
Additionally, the platform supports public browsing, allowing users to explore available feeds without requiring authentication.
18+
19+
Additionally, the platform supports public browsing, allowing users to explore available Integrations without requiring authentication.
1720

1821
## Getting Started
1922

2023
### Initial Subscription
2124

22-
Before accessing the full functionality of the integration feeds library,
25+
Before accessing the full functionality of the Integrations library,
2326
your organization must complete a one-time subscription process.
27+
2428
A designated person from your organization needs to subscribe to the library,
2529
which is completely free and serves as an enablement step for all subsequent users.
30+
2631
Once this initial subscription is completed, all users from your organization will
2732
gain automatic access to the full range of services without any additional steps or recurring costs.
2833

29-
![Subscribe Integration feeds](../assets/images/subscribe-integration-feeds.png)
34+
![Subscribe Integrations](../assets/images/subscribe-integrations.png)
3035

3136
### Accessing the Library
3237

33-
The XTM Hub provides two distinct access methods to accommodate different user needs.
38+
The XTM Hub provides two distinct access methods to accommodate different user needs.
39+
3440
Authenticated access offers the complete feature set,
35-
including the ability to browse and download CSV Feeds,
41+
including the ability to browse and download Integrations,
3642
deploy feeds directly to OpenCTI platforms,
3743
and access detailed feed information and metadata.
44+
3845
For users who prefer to explore before committing,
39-
public access provides read-only capabilities through the cybersecurity-solutions portal,
46+
public access provides read-only capabilities through the [Hub public portal](https://hub.filigran.io/),
4047
where the complete library catalog can be viewed along with feed descriptions and
4148
details without requiring any connection or subscription.
4249

43-
## Working with Integration Feeds
50+
## Working with Integrations
4451

4552
### Feed Exploration
4653

47-
The XTM Hub provides comprehensive information when you interact with any Integration Feed tile in the library.
48-
Each feed includes detailed specifications and content descriptions to help you make informed decisions about integration.
54+
The XTM Hub provides comprehensive information when you interact with any Integration tile in the library.
55+
Each Integration includes detailed specifications and content descriptions to help you make informed decisions about Integration.
56+
4957
Download options are readily available for users who prefer manual import processes,
5058
while sharing capability allow you to generate shareable links that facilitate easy
5159
collaboration with team members and external partners.
5260

53-
The Integration Feeds library offers several filters to help you find the feed that best suits your needs.
61+
The Integrations library offers several filters to help you find the feed that best suits your needs.
5462
You can filter feeds by:
5563

5664
- Use case
5765
- Integration Feed type (CSV Feed, Connector, etc.)
5866
- Platform compatibility (with registered OpenCTI platforms)
5967
- Deployment mode (automatic or manual)
6068

61-
### Sharing and Collaboration
69+
### Sharing and Collaborating
6270

6371
The XTM Hub facilitates seamless collaboration through its comprehensive sharing functionality.
64-
Users can generate universal links for any Integration Feed, enabling cross-organization sharing with partners,
72+
Users can generate universal links for any Integration, enabling cross-organization sharing with partners,
6573
clients, or team members without requiring recipients to maintain XTM Hub accounts.
74+
6675
This approach removes barriers to information sharing while maintaining the integrity and
6776
accessibility of threat intelligence data across different organizational boundaries.
6877

@@ -75,20 +84,26 @@ into your OpenCTI platform (available from OpenCTI 6.7.10).
7584

7685
Before using this functionality, your OpenCTI platform must be properly registered in the XTM Hub (see [OpenCTI registration documentation](../user/opencti-registration.md)).
7786

78-
The deployment process is straightforward: select your desired compatible Integration Feed tile, click on the ```Deploy on OpenCTI``` button,
87+
The deployment process is straightforward: select your desired compatible Integration tile, click on the ```Deploy on OpenCTI``` button,
7988
choose your target platform if multiple platforms are registered,
80-
and wait a few seconds until successful integration is confirmed in your OpenCTI platform.
81-
That will open the import drawer and you must fill the required information to deploy the Integration Feed.
89+
and wait a few seconds until successful Integration is confirmed in your OpenCTI platform.
90+
That will open the import drawer, and you must fill the required information to deploy the Integration.
91+
92+
One click deployment is currently available for
93+
94+
- CSV Feeds
95+
- TAXII Feeds
96+
- Connectors
8297

8398
## Specific feed type considerations
8499

85-
### Manual Import CSV Feeds to OpenCTI
100+
### Manual Import Integrations to OpenCTI
86101

87102
Organizations that prefer traditional import methods can
88-
easily download desired CSV Feeds from the library and manually integrate them
89-
into their OpenCTI platforms. This process involves downloading the CSV file,
103+
easily download desired Integration from the library and manually integrate them
104+
into their OpenCTI platforms. This process involves downloading the Integration file,
90105
navigating to your OpenCTI platform, and using the standard Import functionality
91-
to upload and configure the feed according to your specific requirements.
106+
to upload and configure the Integration according to your specific requirements.
92107

93108
### Connectors Compatibility
94109

@@ -113,7 +128,7 @@ The Connector card and Connectors details page also indicates whether the Connec
113128

114129
## Technical Requirements and Best Practices
115130

116-
Successful integration with the XTM Hub requires attention to several technical considerations.
131+
Successful Integration with the XTM Hub requires attention to several technical considerations.
117132
Users deploying feeds must maintain appropriate OpenCTI permissions,
118-
including UPDATE/CREATE capability for CSV Feeds or Connectors.
133+
including UPDATE/CREATE capability for CSV Feeds, TAXII Feeds, OpenCTI Streams, Third Party Integrations or Connectors.
119134
Platform registration involves registering OpenCTI platforms in the XTM Hub.

mkdocs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@ nav:
114114
- Free Trials: user/freetrials.md
115115
- Registration: user/opencti-registration.md
116116
- Custom Dashboards library: libraries/custom-dashboards.md
117-
- Integration Feeds library: libraries/integration-feeds.md
117+
- Integrations library: libraries/integrations.md
118118
- OpenAEV:
119119
- Registration: user/openaev-registration.md
120120
- Scenarios library: libraries/openaev-scenarios.md

0 commit comments

Comments
 (0)