ThreatDown
by Malwarebytes
Malwarebytes business endpoint protection, EDR and MDR, formerly Nebula.
- Category
- IT, Security & Monitoring
- Type
- Endpoint security
- Interface
- REST API
- Built with
- Connect Any API
- Credentials
- OAuth 2.0
02Data
What you can sync.
- Endpoints
- Detections
- Events
- Jobs
Keep ThreatDown endpoints in your own Lake, on your servers, and report on it with the rest of IT.
Need more? Name any other ThreatDown data the API returns, and the AI adds it to the connector.
03Credentials
Credentials you will need.
- OAuth 2.0 (client ID, client secret, refresh token)
ThreatDown uses OAuth 2.0 (client ID, client secret, refresh token). You add the credentials once, when the AI asks for them, and it tells you where to create them in Malwarebytes if you need help.
04How it works
How it works in DataMind.
-
Pick ThreatDown.
Open Lake, pick ThreatDown in the source picker and name the connection. Connect Any API opens with a ready prompt that points the AI at the ThreatDown API docs.
-
Answer a few questions.
The AI reads the ThreatDown documentation, then asks which credentials you will use, which data to sync (for example endpoints and detections), whether you want a one-time load or a recurring sync, and which accounts or filters apply.
-
Your data lands in Lake.
It builds the connector, tests it and shows you sample rows. Then ThreatDown data loads into your Lake on your schedule, ready for the Warehouse, DataPrism BI and AI Minds.
05Related
More like ThreatDown.
CrowdStrike FalconEndpoint security
Microsoft Defender for EndpointEndpoint security
Microsoft Defender XDREndpoint security
SentinelOne SingularityEndpoint security
Symantec Endpoint SecurityEndpoint security
Trellix ePolicy OrchestratorEndpoint security
Absolute Secure EndpointEndpoint security
Bitdefender GravityZoneEndpoint security