CloudSEK integration

Overview

CloudSEK is AI-powered Digital Risk Monitoring platform that provides real-time visibility of cyber threats and actionable Intel. This connector facilitates the integration with CloudSEK's Alerts API to retrieve and monitor alerts logs in real-time.

Prerequisites

• Access Token: An Access Token is required to authenticate API requests
• CloudSEK platform access credentials
• Bloo platform access credentials

Configuration Steps

1. Generate an API Key

1. Log in to the CloudSEK platform
2. In the Profile Menu on the top-right corner, click Platform Settings to navigate to the CloudSEK Platform Settings page
3. Click View details under Integrations to proceed
4. The following options are available in the Integrations page: Slack, Alert Emails, Jira, Amazon SQS, Alerts API, Service Now
5. Click Alerts API in the Integrations page
6. If you have already added integrations, the platform displays a list of integrations as shown
7. To add a new integration to the configuration list, click +Add Configuration
8. The following fields are available in the Add Configuration window:
   • Name: A suitable name that is relevant to the use case or alert
   • Description: A suitable description that explains the purpose of the alert
   • Add to default configuration: Sets the integration configuration as the default and adds it automatically to every alert rule
9. Upon proceeding with the details, the platform generates a secret key which is the API Access token. You are required to copy the generated access token to integrate the alerts from CloudSEK with other platforms

2. Configure Connector Settings

The following configurations are required to forward CloudSEK logs to DNIF:

Field	Description
Connector Name	Provide a unique name for this connector
Access Token	Enter the API key generated from your CloudSEK account

3. Test Connection

After entering the required details:

1. Click Save to store the configuration
2. Click Test Connection to verify connectivity. A 'Connection successful' message will confirm proper setup
3. If the connection fails, refer to Troubleshooting Connector Validations for guidance

By completing these steps, the connector will begin fetching logs from the CloudSEK, enabling real-time monitoring and integration with your systems.

CloudSEK Platform Features

• AI-Powered Monitoring: Advanced artificial intelligence for threat detection
• Digital Risk Assessment: Comprehensive digital risk evaluation
• Real-Time Alerts: Immediate notification of security threats
• Actionable Intelligence: Contextual threat information for response
• Multi-Channel Integration: Support for various notification channels

Security Considerations

• Store API access tokens securely
• Regularly rotate access tokens
• Monitor API usage and rate limits
• Use appropriate alert rule configurations
• Review and update integration settings regularly

Troubleshooting

For additional help, refer to:

• Troubleshooting Connector Validations
• CloudSEK platform documentation
• CloudSEK Alerts API documentation
• Bloo platform support documentation