Zerofox

Zerofox is cybersecurity platform. It is an external threat intelligence, protection, and response solution that provides organizations complete visibility and protection across the surface, deep, and dark web. DataBee integrates with Zerofox to ingest security findings

Integration Method: API

Tables: Detection Findings

Events: Alerts

This integration has been tested against the Zerofox API version 1.0.

Zerofox Configuration

To use the integration you will need to get a Personal Access Token.

1. Login to the Zerofox console

2. Go to the Settings → Data Connections tab.

   

3. Go to API Data Feeds tab.

   

4. Scroll to the bottom and find the API Tokens.

   

5. Copy the Personal Access Token. It will be used when configuring DataBee.

DataBee Configuration

1. Log into the DataBee console, navigate to Data, and click on Add New Data Source.

   

2. Search for Zerofox and click it.

   

3. Select API Ingest.

   

4. Fill in the data source details.

   

5. Choose Bearer Token as the Authorization method.

6. Paste the Personal Access Token into the Token field.

   

7. If the API URL box is empty, Add in https://api.zerofox.com/1.0/alerts into the API URL box.