Overview

FortiNDR Cloud is a cloud-based network detection and response solution built for the rapid detection of threat activity, investigation of suspicious behavior, proactive hunting for potential risks, and directing a fast and effective response to active threats.

Integration Overview

The FortiNDR Cloud SOAR integration enables security teams to utilize the features and functionality of the FortiNDR Cloud solution with their existing Splunk SOAR deployment. The integration leverages FortiNDR Cloud's fully RESTful APIs to interact with the FortiNDR Cloud backend to introduce specific data sets into Splunk SOAR. This document contains all the necessary information to configure, install, and use the integration.