In this section, we'll introduce the following concepts:
Learn how to set up a ThreatQ source.
Insight Enrichment Server
Learn how to automatically enrich CSE Insights.
Enable VirusTotal Enrichment
Learn how to enrich Signals based on queries it runs against VirusTotal.
Learn how to integrate CSE with a TAXII threat intelligence feed.
Security Incident Response (SIR)
Learn to install and configure the integration between Sumo Logic CSE and ServiceNow's SIR.
Enrichments and Threat Indicators
Learn how enrichments can add threat indicators to show risk level in Insights and Entities.