Can I integrate AIR with my SOAR/SIEM?

Integrating AIR with SOAR/SIEM

AIR can be triggered by your SIEM/SOAR product without human intervention. This makes it a perfect match for responding to alerts you receive from these solutions. 
Communication with SIEM products is bi-directional. So, AIR not only receives alerts/triggers from your SIEM but also reports the actions it performed back to it via Syslog Protocol.

Can I use AIR with EDR/XDR Products?

What (sub)domains are used by AIR?

Last modified 1yr ago