ThreatGRID analysis notification

gabrieleferrari — Fri, 21 Feb 2020 05:05:08 GMT

Hi All,

I have a question about ThreatGRID appliance integrated with Cisco ESA for local sandbox analysis.

Is it possible to receive notification from ThreatGRID appliance in case of an analized file is classified as Malware?

I.E could be a good option a Syslog Message, an SNMP trap or an HTTP Post through API.

I've seen that in ESA these information are stored in the amp and mail_log log files but mixed with information about good reputation files.

Thanks

Best regards

Gabriele

Re: ThreatGRID analysis notification

yogdhanu — Wed, 20 Dec 2017 18:42:26 GMT

Hello,

There is syslog option in Threatgrid. There is also TG API you can use.

Thanks,

Yogesh