CISCO AMP API KEY

[Service Delivery]

We have Cisco Firepower with and AMP Malware licence, we also have a SIEM box from a company called LogRythm, we have discovered that we can have access to the Cisco AMP threat grid directly from the SIEM box as long as we have a current AMP license which we have. The screenshot below shows what we require;

Any help would be appreciated.

Thanks

Mark

[E.L. Howard]

Hi Mark - you can obtain this by logging in to your AMP Threat Grid [TG] cloud account [https://panacea.threatgrid.com]. The API key is available under your username -> My Account.

Note: Access to the AMP Threat Grid console requires a AMP Threat Grid subscription. If you have AMP for Networks, AMP for Endpoints, or some other integrated use of AMP Threat Grid [ESA/WSA/etc], those AMP Threat Grid integrations do not include a login to the Threat Grid console.

Screenshot attached.

Hope this helps,
ELH