Zerofox

Zerofox is a cybersecurity platform that provides organizations with complete visibility and protection across the surface, deep, and dark web. Integrate DataBee with Zerofox to ingest security findings. For detailed information, please refer to the Zerofox’s official documentation.

Integration Method: API

Tables: Detection Finding (2004)

This integration supports the following events.

This integration supports the following versions.

Note:

Zerofox doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service.

Prerequisites

• The user should have access to the Zerofox platform.

• The user should have access to DataBee console.

Configuration Overview

1. Generate a Personal Access Token Zerofox platform to access the APIs.

2. Add the Zerofox in the DataBee console with the below parameters.

   DataBee Parameter	Zerofox Parameter
   Token	Personal Access Token

Zerofox Configuration

1. Sign in to the Zerofox platform.
    

2. Navigate to Settings > Data Connections tab. 
    

3. Click on API Data Feeds tab.
    
   

4. Scroll to the API Tokens section.
    

5. Click on Reset.
    

6. Click on Show.
    

7. Copy the generated Personal Access Token and store it in a secure place.
    

DataBee Configuration

To configure the data source,

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for the Zerofox and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with.

   • Authorization Method: Bearer Token

   • Token: enter the above generated personal access token.

   • Event Types: preselected for all the event types that integration pulls.

     
     

6. Click Submit.

Troubleshooting Tips

• Ensure Personal Access Token pasted correctly. If Personal Access Token is lost, navigate to API Tokens and Reset the token. Ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.