Darktrace
Self-learning AI platform for network, email, cloud and OT threat detection; the REST API returns model breaches, AI Analyst incidents and devices.
- Category
- IT, Security & Monitoring
- Type
- Network detection & response
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- Signed requests
02Data
What you can sync.
- Model breaches
- Ai analyst incidents
- Devices
- Antigena actions
- Subnets
Join Darktrace model breaches with assets and people data to see risk by team, system and owner.
Need more? Name any other Darktrace data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- Signed requests (key and secret)
Darktrace uses signed requests (key and secret). You add the credentials once, when the AI asks for them, and it tells you where to create them in Darktrace if you need help.
04How it works
How it works in DataMind.
-
Pick Darktrace.
Open Lake, pick Darktrace in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the Darktrace API docs.
-
Answer a few questions.
The AI reads the Darktrace documentation, then asks which credentials you will use, which data to sync (for example model breaches and ai analyst incidents), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then Darktrace data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.
05Related
