Plugins for SIR

[SRIRAMSANKAR007]

What are the plugins usually needed to install for integration, testing, workspace access for a general Security Incident response module. And what are the steps need to involve for integrations, like importing information from an external third party tool like Splunk or Crowdstrike. Give me a generalized answer for easy understanding.

[iftekhar_mirza]

Hi @SRIRAMSANKAR007 ,

You can refer to the below articles for a generalized overview of the plugins, integrations, and steps involved in setting up Security Incident Response integrations with external tools.
Security Incident Response (SIR) Integration 
SIR Workspace Plugins 

Hope this helps!

Please mark my answer as helpful/correct if it resolves your query.

Regards,

Iftekhar