TruSTAR is a threat intelligence platform designed to accelerate incident analysis process and exchange of intelligence among various internal and external teams. This document provides a description how paying customers of Digital Shadows can correlate reports and indicators produced by the Digital Shadows with data stored in their TruSTAR enclaves. This integration also provides a direct link back to Digital Shadows to take advantage of other services specifically provided by them.
This integration requires TruSTAR users to be paying customers of Digital Shadows. You will also need your Digital Shadows API key.
After you have retrieved your Digital Shadows API key follow these steps:
- Log into TruSTAR Station and go the Explore->Marketplace (https://station.trustar.co/browse/marketplace).
- Click on Closed Sources.
- Click on Digital Shadows logo and fill in your API key.
- Click Submit.
After the integration in enabled you should see it reports from Digital Shadows being submitted into an enclave you control on TruSTAR.
What data do you currently pull from Digital Shadows?
Our integration currently only pulls reports from Digital Shadows that have cyber IOC’s.
- Intelligence reports
- Intelligence - Incident reports
- Intelligence - Threat reports
How often is the data pulled?
Our integration retrieves data from Digital Shadows every 24 hours at midnight.