Skip to main content
solo1
Visitor III
September 10, 2024
Question

Automation for threat weights that are "High" or "Critical." on Fortigate to a webhook

  • September 10, 2024
  • 1 reply
  • 699 views

I want to send data to a SOC. The SOC is using LimaCharlie and they can receive alerts with webhook.

 

On my Fortigate I want to create a trigger for all threats that have the weight "High" or "Critical.

 

I am here:

Security Fabric > Automation > Create new

 

* Name: LC High/Critical Threat

* Description: Send threats to LimaCharlie over webhook

 

Now when I click "Select Entries" + "Create" I get the following:

 

create.png

 

Where should I continue in order to find the threats?

 

The webhook URL is 

b76093c3662d5b4f.hook.limacharlie.io/ORGID/ADAPTER_NAME/PASSWORD

 

 

 

 

1 reply

AEK
SuperUser
SuperUser
September 10, 2024

If I'm not wrong you may need FortiAnalyzer for that.

AEK