Integrate CSAP
Collaborate (CSAP) is an automated threat alert aggregation and information-sharing platform that equips key security personnel with information to improve situational awareness and resilience. By integrating Collaborate with Respond (CFTR), you can sign in to Collaborate without additional authorization.
Before you Start
To integrate Collaborate with Respond, ensure that:
You have Create/Update permission to Configurations.
You have the Collaborate API credentials.
Steps
Generate Collaborate API Credentials
To gain Rest API access to Collaborate endpoints, you have to generate API credentials for your API user from the Analyst Portal.
To generate Collaborate API credentials, follow these steps:
In the Analyst Portal, go to Administration > Integrations.
In CSAP Integrations, click Open API Credentials.
Click Generate API Credentials. Use the following information while generating credentials:
Title: Enter the title for credentials. This title acts as an identifier for the generated credentials. For example, API Credentials for John Doe.
Select Analyst to generate API credentials for another analyst.
User: Enter the name and select the analyst user for whom you want to generate credentials.
If you want to share the credentials with the selected users through email, select Share via Email.
Click Generate to generate the credentials. You can now view the credentials. The credentials are also shared with the selected user if you have selected Share via Email.
Click Copy All to copy and save the Access ID, End Point, and Secret Key.
Click Download the .CSV to download the credentials. Ensure that you save the credentials for your reference because you cannot generate the same credentials again.
Configure Collaborate API Credentials in Respond
To configure CSAP API credentials in Respond, follow these steps:
Go to Admin Panel > Configurations > Integrations > CSAP.
Click Edit and enable CSAP.
Enter the CSAP API credentials.
Click Save.
To verify the integration, click Test Connection.