Connectors / Anomali Threatstream
What Deixic does with Anomali Threatstream.
Read only
Use assets, audit events and findings from Anomali Threatstream to answer a question or review a setting. This connection is read only.
How Deixic helps with Anomali Threatstream.
- Read information
- Review assets, audit events and findings from Anomali Threatstream as evidence and to check state.
- Read only
- Use the information to prepare a decision. Deixic changes nothing in Anomali Threatstream through this connection.
Example workflow
Review assets in Anomali Threatstream
Review assets in the Anomali Threatstream account I specify. Return the relevant identifiers, what you found, and any information still needed to answer my question.
- Confirm the account and the question to answer. Read assets and keep the relevant identifiers with the result.
- Use the information to prepare a decision. This connection is read only; a person or another authorized tool makes any change in Anomali Threatstream.
- Check the returned information against the question. Refresh Anomali Threatstream when the decision needs current facts, and record what is still missing.
Use your existing agent with Deixic. Calls you route through Deixic follow your access and approval policy.
Provider access
Supported Anomali Threatstream reads and actions.
Choose the reads and actions your task needs. Your connection’s permissions and your agent’s access determine what it can use.
Read data
- Assets Read
- Audit Events Read
- Findings Read
- Policies Read
- Vulnerabilities Read
Actions
This connection does not expose a write or invoke action.
Permissions
Choose the access for Anomali Threatstream.
Use a token issued for the account the agent should work in, check its owner, expiry, and resource access, and remember that replacing an expired token does not change the account’s permissions.
Find Anomali Threatstream in the appManage connected accounts
- Connection
- Bearer token
- Supported operations
- Read only
- Reads
- 5
- Actions
- 0
- Provider permissions
- Grant only the permissions needed for the task.
What you need to connect
- API base URL
- Bearer token
Deixic checks calls routed through its gateway and requests approval when your policy requires it.
Reference and troubleshooting
Anomali Threatstream operation reference, troubleshooting, and questions
Connectors for related work
Tell us what you need from Anomali Threatstream.
Bring one task. We’ll show you the access it needs and how Deixic helps.
Request early access