Cisco Umbrella Reporting
With the Cisco Umbrella Reporting integration you are able to retrieve reports from Cisco Umbrella Reporting. This may be a part of investigating new IOCs or to gain better understanding of activity occurring on your network.
The following actions are available:
- Get DNS Activity – Get DNS activity within the provided time range.
- Get Firewall Activity – Get Firewall activity within the provided time range.
- Get Proxy Activity – Get Proxy activity within the provided time range.
This app can be found in the ThreatConnect App Catalog under the name: Cisco Umbrella Reporting
