Cisco XDR
by Cisco
Extended detection and response platform correlating telemetry across Cisco and third-party tools; APIs return incidents, sightings and observables.
- Category
- IT, Security & Monitoring
- Type
- SIEM & security analytics
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- OAuth 2.0
02Data
What you can sync.
- Incidents
- Sightings
- Observables
- Judgements
- Casebooks
Keep Cisco XDR incidents in your own Lake, on your servers, and report on it with the rest of IT.
Need more? Name any other Cisco XDR data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- OAuth 2.0 (client ID, client secret, refresh token)
Cisco XDR uses OAuth 2.0 (client ID, client secret, refresh token). You add the credentials once, when the AI asks for them, and it tells you where to create them in Cisco if you need help.
04How it works
How it works in DataMind.
-
Pick Cisco XDR.
Open Lake, pick Cisco XDR in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the Cisco XDR API docs.
-
Answer a few questions.
The AI reads the Cisco XDR documentation, then asks which credentials you will use, which data to sync (for example incidents and sightings), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then Cisco XDR data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.
05Related
More like Cisco XDR.
Microsoft SentinelSIEM & security analytics
ExabeamSIEM & security analytics
FortiSIEMSIEM & security analytics
Google Security OperationsSIEM & security analytics
IBM QRadar SIEMSIEM & security analytics
LogRhythm SIEMSIEM & security analytics
Rapid7 InsightIDRSIEM & security analytics
SecuronixSIEM & security analytics