Community Groups

We are thrilled to introduce our new Solution Pack, "Submit Your Content," alongside several updated connectors including the Cisco Meraki MX L7 Firewall (version 1.1.0) and Cisco Firepower (version 3.0.2). This release also features new connectors for SentinelOne, RSS Feed, and more. Check out the full list and links to explore these new features and enhancements since the last announcement  Content-update-week-24-2024   Type Name Version Link Solution Pack Submit Your Content 1.0.0 Link Widget Submit Content Form 1.0.0 Link Connector Slack 3.2.0 Link Connector TAXII2 Threat Intel Feed 1.0.1 Link Connector Cisco Meraki MX L7 Firewall 1.1.0 Link Connector Cisco Firepower 3.0.2 Link Connector SentinelOne 3.4.0 Link Connector RSS Feed 1.0.0 Link Connector Database 2.2.1 Link Connector Web Screenshot 1.0.0 Link Connector NetScaler ADC 1.0.0 Link Connector Cyble Vision 1.0.0 Link

We are thrilled to announce new updates to our platform, featuring Solution Packs and Connectors to enhance cybersecurity operations. These enhancements will improve integration and streamline security operations. The table below outlines the advancements achieved since the last announcement, detailed in the Content-update-week-22-2024 post.   Type Name Version Link Solution Pack Outbreak Response - Oracle WebLogic Server Vulnerability 1.0.0 Link Solution Pack Outbreak Response - PHP RCE Attack 1.0.0 Link Connector Micro Focus Service Manager 1.4.0 Link Connector AWS SQS 1.0.1 Link Connector SCP 1.0.1 Link Connector Check Point Firewall 2.1.0 Link Connector Cisco Umbrella Enforcement 3.0.1 Link Connector Fortinet FortiGate 5.3.0 Link Connector Google Cloud Compute 1.2.0 Link Connector ZeroFox 1.0.1 Link Connector Forcepoint DLP 1.0.0 Link Connector SOCRadar 1.0.0 Link Connector OTbase Inventory 1.0.0 Link Connector Datadog Cloud SIEM 1.0.

We are excited to announce new releases across our solution packs, widgets, and connectors. Highlights include Outbreak Response - D-link Multiple Devices Attack (v1.0.0), FortiManager ZTP Flow (v1.0.3), Picklist as Phases (v1.0.1), Custom Picklist Message (v1.1.2), Fortinet FortiRecon EASM (v1.1.0), CrowdStrike Falcon (v2.4.0), Check Host (v1.0.0), Claroty XDOME (v1.0.0), Tor (v2.0.0), Utilities (v3.3.1), and Vectra (v3.1.0). Upgrade now to enhance your security and streamline operations. The table below outlines the advancements achieved since the last announcement, detailed in the Content update - week 20/2024. Type Name Version URL Solution Pack FortiManager ZTP Flow - Feature Examples 1.0.3 Link Solution Pack Outbreak Response - D-link Multiple Devices Attack 1.0.0 Link Solution Pack FortiManager ZTP Flow 1.0.3 Link Widget Picklist as Phases 1.0.1 Link Widget Custom Picklist Message 1.1.2 Link Connector Fortinet FortiRecon EASM 1.1.0 Link Connector Cro

We are excited to announce new releases! Check out our latest solution packs: SOC Simulator v1.0.3, Outbreak Response for Zoho ManageEngine Vulnerability v1.0.0, and Black Basta Ransomware v1.0.0. We've also updated and added new connectors: Fortinet FortiSIEM v5.2.1, AWS S3 v3.0.2, Microsoft Defender For Cloud v1.2.0, Polar Security v1.0.0, Microsoft Advanced Threat Analytics v1.0.0, Exchange v4.4.0, and Taegis XDR v1.2.0. The table below outlines the advancements achieved since the last announcement, detailed in the FortiSOAR Content Update: Week 18, 2024 post.   Type Name Link Solution Pack SOC Simulator v1.0.3 link Solution Pack Outbreak Response - Zoho ManageEngine Vulnerability v1.0.0 link Solution Pack Outbreak Response - Black Basta Ransomware v1.0.0 link Connector Fortinet FortiSIEM v5.2.1 link Connector AWS S3 v3.0.2 link Connector Microsoft Defender For Cloud v1.2.0 link Connector Polar Security v1.0.0 link Connector Microsoft Advanced Threat A

Fortinet FortiSOAR introduces solution packs for handling outbreaks of Akira Ransomware and C-DATA Web Management System RCE Attacks, providing comprehensive response strategies. Additionally, new connectors for Google Calendar, JumpCloud, Google Docs, Azure Blob Storage, and Cloudflare WAF enhance integration capabilities across various platforms, enhancing security and operational efficiency.   The table below outlines the advancements achieved since the last announcement, detailed in the Content update week 16, 2024 post. Type Name Version Link Solution Pack Outbreak Response: Akira Ransomware v1.0.0 Link Solution Pack Outbreak Response: C-DATA Web Management System RCE Attack v1.0.0 Link Connector Google Calendar v1.0.0 Link Connector JumpCloud v2.0.0 Link Connector Google Docs v1.0.0 Link Connector Azure Blob Storage v1.2.0 Link Connector Cloudflare WAF v1.0.0 Link

Introducing the latest additions to our FortiSOAR ecosystem! Our Solution Packs now include Outbreak Sunhillo SureLine Command Injection Attack SP and Outbreak Response - PAN-OS GlobalProtect Command Injection Vulnerability, empowering users with proactive defense measures. Additionally, our suite of Connectors has expanded to include Micro Focus SMAX v1.0.0, Netbox v1.0.0, PaloAlto Firewall v3.1.1, Microsoft Graph API v2.1.0, ElasticSearch v3.0.0, Zscaler v2.0.0, Anomali ThreatStream v2.5.0, Azure Commands v1.0.0, and MISP v2.1.0. With these enhancements, users can seamlessly integrate diverse security tools, enabling streamlined threat detection and response workflows. The table below outlines the advancements achieved since the last announcement, detailed in the Content update for week 14, 2024 post. Type Name Link Solution Pack Outbreak Sunhillo SureLine Command Injection Attack SP Link Solution Pack Outbreak Response - PAN-OS GlobalProtect Command Injection Vulnerability

In our latest release, FortiSOAR takes a significant leap forward by integrating cutting-edge AI technologies to empower security teams. At the forefront is FortiAI, a groundbreaking solution driven by Generative AI. FortiAI revolutionizes security operations by providing contextual responses, generating playbook blocks, and offering tailored insights into security threats, response processes, and more. But the innovation doesn't stop there. Our release introduces a diverse range of widgets designed to enhance visualization and streamline workflows. From the SOC Overview Sankey widget to the AI Assistant, these intuitive tools offer seamless integration and facilitate efficient decision-making in security operations. Complementing these advancements are a suite of connectors, including OpenAI, Symantec Messaging Gateway, and KnowB4 PhishER, among others. These connectors expand integration possibilities, allowing for enhanced collaboration and automation across security environments. &

FortiSOAR FortiAI is a cutting-edge tool designed to assist security operations teams in streamlining their workflow processes. It offers features such as generating playbooks for security use cases, providing contextual answers to questions, and assisting with Jinja expressions. Users can leverage its capabilities to automate and enhance their security operations, making them more efficient and effective. Benefits of FortiAI are: Customized SOC Questions: The analyst can now define specific questions tailored to their organization's security needs. For instance, they may set prompts like "Get Alert Summary" or "Generate Investigation Report" to quickly gather crucial information during an incident. Smarter Playbook Generation: With the enhanced playbook generation mode, the analyst can prioritize steps based on installed connectors, ensuring a more coherent response strategy. This means faster and more effective incident resolution. Simplified Configuration: The analyst can easily co

We're excited to share some fantastic news with you all: the integration of Source Control, marking a significant milestone in content development lifecycle management across multiple FortiSOAR environments. This integration ensures a smooth transition through Development, Staging, and Production stages, enhancing efficiency and ease of use. Our latest offerings include the SOAR Framework Solution Pack (SFSP) and the FortiSOAR Solution Pack for Threat Intelligence Management. Our updates also include enhancements aimed at facilitating end-to-end malware incident management, starting from initial alert investigation to comprehensive remediation actions. We're introducing new widgets and connectors to streamline various processes such as Playbook Buttons, Playbook Execution Wizard, Record Card, JSON to grid for data visualization, CICD Configuration Wizard for CI/CD, and Record CTA Card for incident response. To foster stronger integrations, we've expanded our connector support

The https://futurecio.tech/a-secure-future-goes-beyond-automation/ discusses the role of Security Orchestration, Automation, and Response (SOAR) in cybersecurity, emphasizing the need for mature cybersecurity processes for effective implementation. Abhishek Narula, CTO at Fortinet's SOAR business unit, highlights the importance of AI in both defensive and adversarial cyber activities. He dispels concerns about automation taking away jobs and emphasizes the value SOAR brings to Security Operations Centers (SOCs). Narula suggests a broader definition of SOAR as "streamlined operations and accelerated response" and advocates for a unified console for comprehensive security analysis. The article also touches on the connection between SOAR and Security Information and Event Management (SIEM), the adoption of SOAR by managed security service providers, and the significance of partnerships in addressing cyber threats. Finally, Narula advises focusing on SaaS and convergence as key themes for

Exciting news! FortiSOAR™ unveils a series of robust enhancements, including the Outbreak Response - ConnectWise ScreenConnect Attack v1.0.0 solution pack, designed to elevate threat hunting capabilities and effectively tackle security risks. Additionally, fortify your workflows with the secure and efficient management of critical secrets through Keeper Secret Manager v1.0.0. Version 3.3.0 introduces improved utilities integration, optimizing operational processes and enhancing the overall versatility of utilities within FortiSOAR™ for a more efficient and seamless user experience. The table below outlines the advancements achieved since the last announcement Type Name Link Solution Pack ConnectWise ScreenConnect Attack v1.0.0 Link Connector Qualys v1.0.2 Link Connector SecurityTrails v1.0.0 Link Connector Keeper Secret Manager v1.0.0 Link Connector Utilities Connector v3.3.0 Link  

FortiSOARs commitment to proactive security is evident with the introduction of Solution Packs, emphasizing swift response strategies. The C2 Malware Traffic Response pack ensures rapid action against C2 attacks, while new outbreaks like "Adobe ColdFusion Access Control Bypass Attack v1.0.0" and "Androxgh0st Malware Attack v1.0.0" are added to the outbreak framework. The Phishing Email Response Solution Pack streamlines incident response in the Security Operations Center, providing a robust defense against suspicious emails. Fortinet's suite of connectors facilitates efficient data integration and proactive threat defense, including the Plain text Feed v1.0.0, FortiGuard v3.1.3 for real-time threat intelligence, and Remote ScreenShot v1.0.1 for visual insights. Integration with Qualys Web Application Scanning(WAS) 2.0.0 and Tenable Security Center v1.1.0 further enhances vulnerability management, empowering organizations with advanced capabilities.The table below outlines the advanceme

Congratulations to BK Bharathram, Abhishek Narula, and Pooja Singh on successfully obtaining a patent for "Systems and methods for generating SOAR playbooks"! Your collaborative efforts and innovative approach have truly left a mark in the field of security orchestration, automation, and response. Wishing you continued success and eagerly anticipating more remarkable achievements in your professional journeys! <snippet from patent>FIELD Embodiments of the present invention generally relate to generation of SOAR playbooks using a variety playbook sources. BACKGROUND A great deal of human effort has been applied to developing processes in relation to network monitoring and maintenance. Such efforts are often not transferrable as new processes and/or systems are brought online. A new approach called “Security Orchestration, Automation, and Response” (SOAR) has become popular. In such SOAR based systems the ability to use an automation framework effectively to orchestrate network act

As we step into the promising landscape of 2024, FortiSOAR extends its warm wishes and enthusiasm for the year ahead. We are thrilled to unveil our inaugural release announcement of the year. The release includes a comprehensive set of Solution Packs addressing outbreak responses, vulnerability management, and security incidents. Additionally, a diverse array of Connectors, Widgets, and a Splunk App enrich our offering, elevating capabilities in threat intelligence integration and incident monitoring. The incorporation of a Rapid Development Kit (RDK) underscores FortiSOAR's dedication to facilitating the creation of third-party integrations and connectors effortlessly, while also fostering similar outcomes from community contributors.The table below outlines the advancements achieved since the last announcement   Type  Name Link SolutionPack Outbreak Response Lazarus Rat Attack v1.0.0 Link SolutionPack FortiManager ZTP Flow - Feature Examples v1.0.2 Link SolutionPac

Tech Enthusiasts and Solution Seekers! Embark on a journey of innovation as we proudly introduce our latest Content Hub additions! Brace yourselves for a wave of cutting-edge connectors, widgets, and solution packs meticulously crafted by our dedicated team to elevate your workflow and turbocharge productivity.   Immerse yourself in the seamless connectivity of our new connectors, forging instant links with your favorite applications. Revel in swift access to crucial information through our intuitive widgets, designed to make your tasks effortlessly efficient. Take on specific challenges with confidence, armed with our comprehensive solution packs that are tailor-made to optimize your workflow.   But that's not all – we've left no stone unturned in updating our existing offerings, ensuring complete compatibility with the latest versions of your preferred tools and platforms. Whether you're a small business, or a thriving enterprise, we've got your back!   Unlock the unta

FortiSOAR has unveiled its latest release, version 7.4.3, featuring groundbreaking innovations aimed at enhancing user experience and efficiency. One notable introduction is the Fortinet Advisor, currently in its preview version, serving as an AI assistant tailored for FortiSOAR users and compatible with version 7.4.3 and later. Fortinet Advisor Key Features: Effortless Playbook Design: The Advisor simplifies playbook development by generating playbook blocks, significantly reducing the time and effort required. This is especially beneficial for users new to playbook creation. AI-Assisted Threat Analysis: During threat investigations, the Advisor provides contextual answers and insights. Its natural language capabilities make it a valuable companion in understanding and responding to security incidents. Jinja Expression Assistance: The Advisor assists users in simplifying the complexity of Jinja expressions, offering guidance and support for more effective security workflows. E

Exciting News for Tech Enthusiasts and Solution Seekers!   We are thrilled to unveil our latest marketplace additions, featuring cutting-edge connectors, widgets, and solution packs! Our dedicated team has tirelessly crafted these innovations to elevate your workflow and supercharge productivity.   Seamlessly link up with your favorite applications using our new connectors, and enjoy swift access to crucial information with our intuitive widgets. Tackle specific challenges head-on with our comprehensive solution packs, designed to optimize your efficiency.   But that's not all – we've diligently updated our existing offerings to ensure full compatibility with the latest versions of your preferred tools and platforms. Whether you're a small business, freelancer, or large enterprise, we've got your back!   Unlock the potential of your workflow. Explore our marketplace now for the complete lineup of our groundbreaking new releases and enhanced offerings. Don't miss out

With over 500 connectors, 45 Solutions Packs, and numerous widgets, our content hub is designed to make it easy for you to find the content you need. Whether you are looking for connectors, widgets, or solutions packs, we have something for everyone.   We are also proud to announce the availability of updated versions of on our content hub. These new versions offer enhanced performance, improved design, and additional features to help you customize your FortiSOAR instance with ease.   The following table summarizes the progress we have made since the last announcement.   # Type Name 1 Solution Pack Outbreak Response Management Framework v1.0.0 [Doc] 2 Solution Pack Outbreak Response - Progress MOVEit Transfer SQL Injection Vulnerability v1.0.0 [Doc] 3 Solution Pack Outbreak Response Log4J v1.0.0 [Doc] 4 Solution Pack Phishing Incident Management v1.1.0 [Doc] 5 Solution Pack SOC Utilities v1.0.1 [Doc] 6 Connector Azure Firewall v2.0.1 [Doc] 7 Connector Ex

FortiSOAR Content Hub Gets Even Better with New Connectors, Widgets, and Solution Packs We're releasing a new batch of connectors, widgets, and solution packs for FortiSOAR, our security orchestration, automation, and response (SOAR) platform. These new offerings will help you streamline your security operations and improve your overall security posture. What's New Connectors: We're adding support for even more security tools and technologies, including Abnormal Security, SLA Calculator v2, and updates to Extrahop and other connectors. Widgets: We're making it easier for you to access the information you need most with new widgets for Global Visibility, like Top X and Record Summary. Solution packs: We're helping you tackle specific security challenges with new solution packs. Existing offerings We've also updated our existing FortiSOAR connectors, widgets, and solution packs to ensure that they're compatible with the latest versions of security tools and technologies. How to get st

With due credit to FortiSOAR's devoted Product Manager, who happens to excel in crafting release poems as well. MSSPs are in more control,Playbook Designers, in joy, will roll,2FA with Google was a long term goalwell the list is huge, you’ll need a scroll!Our effort to make this fragrant bouquet has been made - We hand over this to you, embrace it, 7.4.2 is GA’d!   This masterpiece encapsulates the passion, hard work, and innovation that has gone into the crafting of yet another exceptional release. For more see :https://community.fortinet.com/t5/FortiSOAR-Discussions/FortiSOAR-announces-release-version-7-4-2/td-p/278034

Exciting developments have emerged on our Content Hub, designed to empower your cybersecurity efforts. We're thrilled to introduce an array of new connectors, widgets, and solution packs that promise to revolutionize your Security and Automated Response playbooks.   Seamlessly integrate with Microsoft OneDrive, Pure Storage Flash Array, Duo, and over 600 others! These connectors unlock the potential to harness richer data and insights, bolstering your security posture.!   Elevate your operational efficiency with our pre-built solution packs. These comprehensive templates come complete with playbooks and user flows addressing common use cases and some not so common such as working with GDPR and HIPAA regulations. It's your shortcut to streamlined threat response and mitigation.   Moreover, we've not just stopped at the new additions; we've also fine-tuned existing content. Expect enhanced features and improved performance to ensure you're at the forefront of threat intell

We are excited to announce that new connectors, widgets, and solution packs are now available on the Content Hub. We have also released new versions of existing content with enhanced features and improved performance.   Our new connectors enable seamless integration with popular threat intel platforms like Azure's Web Application Firewall, FullHunt, Have I Been Pwned, and 500 more! Solution packs provide pre-built templates for common use cases, complete with playbooks and user flows!   The following table summarizes the progress we have made since the last announcement.   1 Solution Pack Threat Intel Management v1.2.1 [Doc] 2 Connector Azure Front Door WAF v1.0.0 [Doc] 3 Connector Fortinet FortiGuard Threat Intelligence v3.1.2 [Doc] 4 Connector Fullhunt v1.0.0 [Doc] 5 Connector Have I Been Pwned v2.0.1 [Doc] 6 Connector Maltiverse v1.0.0 [Doc] 7 Connector Palo Alto Networks Panorama v3.1.0 [Doc] 8 Connector Palo Alto Firewall 3.1.0 [Doc] 9 Connector T

Attention all tech enthusiasts and solution seekers! We are thrilled to introduce our latest innovations now available on the Content Hub - an array of new connectors, widgets, and solution packs! Our dedicated team has put in countless hours of effort to deliver cutting-edge solutions that will supercharge your productivity and streamline your workflow.   Our new connectors make it a breeze to link up with your favorite applications and platforms, while our widgets offer speedy access to crucial information. Additionally, our solution packs are comprehensive toolkits designed to empower you in tackling specific challenges and optimizing your workflow.   Furthermore, we've gone the extra mile to ensure that our existing offerings are fully compatible with the latest versions of your beloved tools and platforms. It doesn't matter if you're a small business owner, a freelancer, or a major enterprise - we've got your needs covered!   Don't wait; elevate your workflow today!

Community Announcement: Introducing New Solution Packs, Widgets, and Connectors on the Content Hub!   Our team has been hard at work to bring you a range of innovative solution packs, widgets, and connectors to enhance your experience and unlock new possibilities.   Solution Packs: We have introduced solution packs tailored to specific needs and industries. These packs come pre-packaged with a collection of templates, assets, and tools designed to jump-start your projects and streamline your workflow.   Widgets: Widgets are versatile components that allow you to embed interactive elements seamlessly into your content. With these widgets, you can easily add interactivity and dynamic elements captivating your audience and driving user engagement.   Connectors: Our latest connectors enable you to effortlessly link various platforms and services with FortiSOAR™, enabling smooth data flow and automation. Connectors for popular services like CRM systems, email and cloud s

Community Announcement: Discover New Heights of Efficiency with Our Latest Offerings! We are thrilled to unveil a wave of groundbreaking features designed to elevate your experience on the Content Hub! Our dedicated team has been diligently working to introduce an array of innovative tools that will empower you to achieve more with your projects and content.   Solution Packs: Imagine having a curated set of resources right at your fingertips to kickstart your projects effortlessly. Our brand-new Solution Packs are precisely that! Tailored to cater to specific needs and industries, these packs come complete with an assortment of templates, tools, and assets. This means you can now embark on your projects with boosted confidence, knowing that you have a head start towards success.   Connectors: Efficiency and automation are the cornerstones of modern workflows. Our latest Connectors enable you to effortlessly link various platforms and services to FortiSOAR™. Whether it's synci