BloodHoundEnterprise

Use this integration to fetch audit logs from BloodHound Enterprise as events in Cortex XSIAM.

Analytics & SIEM · BloodHound Enterprise

Configuration parameters

  • server_url — Server URL (e.g., https://example.bloodhoundenterprise.io) (required)
  • client — API Token ID (required)
  • max_events_per_fetch — Maximum number of events per fetch
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • bloodhound-get-events

    Gets events from BloodHound Enterprise.