Digital Shadows

by Elvis Hovor

Introduction

TruSTAR is a threat intelligence platform designed to accelerate incident analysis process and exchange of intelligence among various internal and external teams. This document provides a description how paying customers of Digital Shadows can correlate reports and indicators produced by the Digital Shadows with data stored in their TruSTAR enclaves. This integration also provides a direct link back to Digital Shadows to take advantage of other services specifically provided by them.

Prerequisites

This integration requires TruSTAR users to be paying customers of Digital Shadows. You will also need your Digital Shadows API key.

Configure Integration

After you have retrieved your Digital Shadows API key follow these steps:

  1. Log into TruSTAR Station and go the Explore->Marketplace (https://station.trustar.co/browse/marketplace).
  2. Click on Closed Sources.
  3. Click on Digital Shadows logo and fill in your API key.
  4. Click Submit.
TruSTAR will validate and enable the Digital Shadows integration within 24 hours. You will receive an email from us informing you as soon as it is enabled.


After the integration in enabled you should see it reports from Digital Shadows being submitted into an enclave you control on TruSTAR.

    FAQ

    What data do you currently pull from Digital Shadows? 

    Our integration currently only pulls reports from Digital Shadows that have cyber IOC’s.

      These include:

      • Intelligence reports
      • Intelligence - Incident reports
      • Intelligence - Threat reports
      Please contact us if you would like to discuss how other reports can be pulled from Digital Shadows.

          How often is the data pulled?

          Our integration retrieves data from Digital Shadows every 24 hours at midnight.

          Please reach out to support@trustar.co for any additional questions.

          How Did We Do?