Commvault's integration with Darktrace allows organizations to view Indicators of Compromise (IOC) insights within the Threat Indicators dashboard in order to perform actions to validate that backups are safe.
You can use Darktrace for the following:
- Receive threat intelligence insights and view impacted servers in the Threat Indicators dashboard to drive proactive investigative actions for the clean recovery of data.
Before You Begin
- Download the Darktrace Security Connector workflow from the Commvault Store, and then install it. For more information, see Downloading or Updating a Workflow from the Commvault Store.
Procedure
-
From the navigation pane, go to Workflows.
The Forms page appears.
-
Click Darktrace Security Connector.
The Darktrace Security Connector dialog box appears.
-
Enter the following:
-
DarktraceURL
-
PrivateToken
-
PublicToken
-
-
Click OK.
-
After the workflow installs, go to the Threat Indicators Report for Partner Integration to check for anomalies.
Note
In order to view the Threat Indicators for Partner Integrations report (see Threat Indicators Report for Partner Integration), you must first receive indicators of compromise (IOC) from our partners.