FortiDeceptor Cuckoo integration

[lceh]

Hi everyone,

I noticed FortiDeceptor supports integration with Cuckoo Sandbox, but given that Cuckoo is no longer maintained, I have a few questions:

1. Is anyone actively using Cuckoo (or forks like Cuckoo3) with FortiDeceptor?
2. For those who are, what does your environment look like? What security measures have you implemented to safeguard an unmaintained Cuckoo server?
3. Are there users here leveraging other sandboxing alternatives instead?
4. Has Fortinet issued any official statements about continuing to support Cuckoo integrations or recommendations for alternatives?

Looking forward to hearing how others are approaching this. Thanks!

[kabudiba2]

I am trying to get this going. We have Fortigates, SEIM, Analyzer and possibly SOAR licensing in our environment and not sure where I point the log collector too. I am new to Sentinel https://speedtest.vet/ .