Detect and route cybersecurity threats with SIEM, Slack, email and PagerDuty
Schedule Trigger - Every 15 Minutes
Fetch Network Logs
your-siem-system.com
Fetch Vulnerability Scan Results
your-vulnerability-scanner.com
Fetch Threat Intelligence Feed
api.threatintel.com
Merge All Threat Data
Analyze & Detect Threats
Check Threat Severity
Send Slack Alert - Critical
slack
Send Email Alert - Detailed
smtp
Create PagerDuty Incident
api.pagerduty.com
Create Security Ticket
your-ticketing-system.com
Log Medium/Low Threats
your-siem-system.com
Store in Database
postgres
Merge All Paths
Generate Summary Report
Send Summary to Monitoring Channel
slack
Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.
Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.