elastic/beats

Ingest Recorded Future alerts from RF Connect API

colin-stubbs opened this issue · 2 comments

colin-stubbs commented

Describe the enhancement:

Ingest Recorded Future alerts from the RF Connect API as events.

Describe a specific use case for the enhancement or feature:

Trigger Elastic Security detections for each ingest alert event in order to trigger alerts to third party destinations (ticketing/etc) and support correlation.

elasticmachine commented

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

botelastic commented

Hi!
We just realized that we haven't looked into this issue in a while. We're sorry!

We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1.
Thank you for your contribution!