Overview
Incydr offers a variety of integrations to enable you to leverage Incydr features and data in other systems. This page lists resources for integrating with partner systems to get the most out of Incydr.
APIs
The Incydr API provides powerful capabilities for advanced search and configuration options. You can use the APIs to perform a variety of tasks, from performing automated actions to integrating with existing systems.
Incydr SDK
The Incydr SDK is a wrapper around the Incydr API that provides several utility methods. You can use the SDK to develop your own tools for working with Incydr data while avoiding the overhead of session or authentication management.
Incydr command-line interface (CLI)
The Incydr command-line interface (CLI) tool offers a way to interact with your environment without using the Incydr console or making API calls directly.
SOAR, SIEM, and other tools
Integrations created by Incydr
Incydr has created applications to integrate with a variety of SOAR, SIEM, and data security analytics tools. See the following articles to learn how to use these integrations:
- Install and manage the Code42 app for Cortex XSOAR
- Install and manage the Code42 Insider Threat app for Splunk
- Code42 Insider Threat app for Splunk reference
Integrations created by third-party vendors
The following third-party vendors have created integrations for Incydr. Contact the vendors to learn how to obtain and use their integrations.
- Integrate Code42 with LogRhythm
- Integrate Code42 with Sumo Logic
- Integrate Code42 with Rapid7
- Code42 App for Splunk Phantom
- Nullafi: The Code42 integration with Nullafi allows you to restrict access to sensitive data in your enterprise based on Code42-identified parameters, such as risk severity level or watchlist membership. See our solution brief for more information.
- Tines: The Code42 integration with Tines allows you to incorporate alerts and cases from Code42 into Tines security workflows. For more information, see the following Tines stories:
Each third-party integration requires you to create a unique API client and use the resulting client ID, secret, and base URL to configure the integration. Set the API client's permissions to the minimal permissions needed by the integration.
Workflow automation
Incydr Flows facilitate quick, no-code integrations to automate workflows between Incydr and your other HR, security, and IT tools. These integrations can help speed your processes for detecting, investigating, and responding to insider risks.