Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions cid-redirects.json
Original file line number Diff line number Diff line change
Expand Up @@ -3028,6 +3028,7 @@
"/cid/1154": "/docs/send-data/hosted-collectors/krutrim-object-storage",
"/cid/1159": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/openai-source",
"/cid/1158": "/docs/send-data/opentelemetry-collector/data-source-configurations/windows-active-directory-inventory",
"/cid/1161": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source",
"/release-notes-collector/2026/04/11/hosted/": "/release-notes-collector/2026/05/11/hosted/",
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-api-source": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/armis-source",
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/confluent-cloud-metrics-source/": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/confluent-metrics-source/",
Expand Down
10 changes: 10 additions & 0 deletions docs/security/threat-intelligence/about-threat-intelligence.md
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,16 @@ A Cloud SIEM administrator must first ingest the indicators before they can be u
* [Mandiant Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source)
* [STIX/TAXII 1 Client Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-1-client-source)
* [STIX/TAXII 2 Client Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source)
:::info
Sumo Logic provides the following vendor-specific sources, based on the STIX/TAXII 2 Client Source, to simplify setup:
* CISA TAXII Client
Comment thread
amee-sumo marked this conversation as resolved.
* Dragos TAXII Client
* Nozomi TAXII Client
* Recorded Future TAXII Client
* Unit42 TAXII Client

[Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/stix-taxii-2-client-source/#taxii-2-sources)
:::
* [ZeroFox Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/zerofox-intel-source)
* **Upload**. Manually upload files that add threat intelligence indicators. See [Add indicators in Threat Intelligence](/docs/security/threat-intelligence/threat-intelligence-indicators/#upload). See [Upload formats](/docs/security/threat-intelligence/upload-formats/) for the format to use when uploading indicators using this option or APIs.
* **The API**. See the following APIs in the [Threat Intel Ingest Management](https://api.sumologic.com/docs/#tag/threatIntelIngest) API resource:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,6 @@ Sumo Logic provides the following sources based on the underlying code of our ST
* Dragos TAXII Client
* Nozomi TAXII Client
* Recorded Future TAXII Client
* SOCRadar TAXII Client
* Unit42 TAXII Client

When you set up a source, search for "taxii" and select the tile for the source you want to install:<br/><img src={useBaseUrl('img/security/taxii-sources.png')} alt="TAXII sources" style={{border: '1px solid gray'}} width="800" />
Expand Down