CyberSixgill
Connector Category: Enrichment Tool
About Integration
Cybersixgill integrates with CTIX to provide security teams with the ability to access, automate, and operationalize the dark feed and Dynamic Vulnerability Exploit (DVE) threat intel coming from Cybersixgill.
Use Cases
Enable organizations to gain unparalleled context and essential explanations in order to accelerate their incident prevention and response.
Optimize incident investigations by analyzing patterns and finding correlations between threat data ingested from various sources.
Benefits
Analyzing patterns and finding correlations enables security teams to detect threats at an early stage and make timely decisions.
Adds context to the threat intel using dark web intelligence feeds.
Configure CyberSixgill as Enrichment Tool
Configure CyberSixgill in CTIX to enrich vulnerabilities.
Before you Start
You must have the client secret and client ID of your CyberSixgill account.
Your user group must have the Update enrichment tools and policies, Create enrichment tools and policies, and View enrichment tools and policies permissions.
Steps
Navigate to Administration, select Enrichment Management, and select Enrichment Tools.
Search for Cybersixgill and click on the app.
Click Add Instance.
Enter a unique account name to identify the instance. For example, Prod_Cybersixgill.
Enter the base URL to directly connect to the application's server. For example,
https://sitename.com/directoryname/.Enter the client secret to authenticate your client APIs.
Enter the client ID to authenticate your application on the server.
Select Verify SSL to verify and secure the connection between the CTIX and Cybersixgill servers.
If you disable this option, CTIX may configure an instance for an expired SSL certificate. This may not establish the connection properly and CTIX will not be able to notify you in case of a broken or improper connection. It is recommended to select this option.
Click Save.
To understand the number of API calls and quota units consumed by the Cybersixgill enrichment tool, refer to the following table:
Enrichment Tool | Feed Enrichment Type | Number of API Calls | Quota consumed |
|---|---|---|---|
Cybersixgill | Vulnerability | 1 | 1 |
To successfully configure the integration between CTIX and CyberSixgill, follow the steps mentioned in Enrichment Management.