ThreatGRID analysis notification

[gabrieleferrari]

Hi All,

I have a question about ThreatGRID appliance integrated with Cisco ESA for local sandbox analysis.

Is it possible to receive notification from ThreatGRID appliance in case of an analized file is classified as Malware?

I.E could be a good option a Syslog Message, an SNMP trap or an HTTP Post through API.

I've seen that in ESA these information are stored in the amp and mail_log log files but mixed with information about good reputation files.

Thanks

Best regards

Gabriele

[yogdhanu]

Hello,

There is syslog option in Threatgrid. There is also TG API you can use.

All API documentation can be found here at https://panacea.threatgrid.com/doc/main/api.html

Thanks,

Yogesh