AttackIQ

Attack IQ is a breach and attack simulation platform that emulates the adversary and generates real-time testing to help identify control issues.  It helps to gain full visibility into your security control with automated control validation.

Integration Method: API

Tables: Assessment Finding

DataBee connect to an API endpoint which retrieves a list of assessments and detection, and prevention results generated during each assessment. This integration has been tested against version 1.1.4. of AttackIQ

AttackIQ Setup

To use the AttackIQ API, we need to generate Account Token of AttackIQ platform.

1. Log in to the AttackIQ platform with Username and Password and navigate to profile on top right corner. And click on Account Token.

2. Click on COPY TOKEN TO CLIPBOARD and save it for the later use.

DataBee Setup

• Login to the DataBee console and navigate to the Data tab and click on Add New Data Source

• Search for AttackIQ and click on AttackIQ.

• Click on API Ingest.

• Enter the required details in the contact form.

• In the following dialog box, enter the following:

  • Authentication Method: Bearer Token

  • Token: Paste the Account Token previously generated.

  • API URLs:

    • https://firedrill.attackiq.com/v1/assessments

    • https://firedrill.attackiq.com/v1/results?project_id=<id>

• Click on Submit