This article will cover the basics of the Data Connectors Page in ContraForce. This page is where data connectors are managed.
Overview
The Data Connectors page is the primary page to manage data connectors that are streaming data into ContraForce. The data connectors page is accessed by clicking the icon shown below.
By default, all workspaces will be shown and can be filtered using the Workspaces dropdown on the top of the page.
Note that some workspaces may not have data connector details, as seen in the screenshot above for Defender XDR and QRadar.
Clicking the arrow dropdown will expand the workspace to show the various data connectors and supporting details for the connectors within that workspace.There are multiple columns containing information per data source.
Section | Description |
Data Connector | Name of the data connector |
Status | Connected or Not Connected |
Activity | Shows the amount of alerts and events for a specific day over a 30 day period |
Manage | Clicking "Edit" will open a secondary page where the data source can be disconnected |
Versioning & Subscribing
To help with managing security content per data connector, the ContraForce Security Engineering team adds a version ID to each round of updates that are made for the analytic rule content per connector. By subscribing, ContraForce will update the content in your environment as updates are made. If you do not want ContraForce to add analytic rule content into your environment, you can unsubscribe.
Adding Data Connectors
On the Data Sources page, additional data sources can be added by clicking the "Add Data Connector" icon on the top right. A pop-up will appear containing other data connectors that can be connected. The popup shows the one-click data connectors that can easily be connected to ContraForce without any assistance from the ContraForce Security Engineers. ContraForce supports hundreds of other sources in addition to what is shown on the popup. If you need add a source that you do not see listed, please do not hesitate to reach out to our team.
Once all required data connectors have been selected (click blue lighting bolt icon) click "Add Data Connectors" on the bottom of the page. Click "Configure" and complete any required steps.