AttackIQ

AttackIQ is a breach and attack simulation platform that emulates the adversary and generates real-time testing to help identify and validate control issues. For detailed information, please refer to the AttackIQ’s official documentation.

Integration Method: API

Tables: Assessment Finding (99402001)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have access to the AttackIQ platform.

• The user should have access to DataBee console.

Configuration Overview

1. Generate a Account Token from AttackIQ platform to access the APIs.

2. Add the AttackIQ data feed  in the DataBee console with the parameters below.

   DataBee Parameter	AttackIQ Parameter
   Token	Account Token

Attack IQ Configuration

1. Sign in to the AttackIQ platform.
    

2. Navigate to profile on top right corner. Then click on Account Token.
    

3. Click on Copy Token to Clipboard and save Account Token for later use.
    

   Note:

   Store the generated Account Token in a secure place, as it will only be visible once.

DataBee Configuration

To configure the data source,

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the AttackIQ and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   1. Authorization Method: Bearer Token

   2. API Base URL: this is the base URL that DataBee will interact with.

   3. Token: enter the above generated Account Token.

   4. Event Types: preselected for all the event types that integration pulls.
       

6. Click Submit.

Troubleshooting Tips

• Ensure Account Token pasted correctly. If an Account Token is lost, navigate to Account Token and click on Generate New Token. Ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.