Mandiant Security Validation: Step 3 - Integrations

[GCSCommunity]

Table of Contents

Below you'll find a table of contents for the Integrations journey.

• Table of Contents
• Prerequisites
• Actions
• Chronicle SIEM
• CrowdStrike
• Snowflake

One of the best ways to ensure you get holistic security ation for your environment is to utilize some of the many Integrations that Mandiant Security Validation has to offer. In this section, we will introduce you to some of the most common integrations. To see a list of all of our available 3rd party integrations that support MSV, please see the following MSV Integrations Overview page.

Prerequisites

• Administrative access to MSV Director.
• Administrative access to the integrating platform.

Actions

 Chronicle SIEM

One of the most common integrations is with Chronicle SIEM. In this section, we will walk you through setting up Chronicle SIEM as a receiving source of all event data generated by Mandiant Security Validation.

 

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Administrative access to MSV Director.
• Administrative access to Chronicle SIEM.
• JSON-Formatted keys to a Google Cloud Service Accound with access to Chronicle SIEM.

Steps

1. Create a Service Account and Generate Keys by following the steps in the linked documentation. | Docs

2. In the MSV console, go to Settings > Integrations. From the table, select Add Integrations > Google Chronicle Backstory.

3. Fill out the required fields as described in the linked documentation. | Docs

Relevant Links

• All Steps: https://docs.mandiant.com/home/msv-google-chronicle-backstory-integration
• 1: https://docs.mandiant.com/home/msv-google-chronicle-backstory-integration#before-you-begin
• 3: https://docs.mandiant.com/home/msv-google-chronicle-backstory-integration#configure-security-validat...

CrowdStrike

Crowdstrike is a leading endpoint protection platform that can be integrated with Mandiant Security Validation to provide a more holistic view of your security posture, inclusive of your endpoint devices.

 

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Administrative access to MSV Director.
• Administrative access to CrowdStrike.

Steps

1. Configure Crowdstrike, by logging into your Crowdstrike console and generating an API Key from Falcon. | Docs

2. Configure Security Validation, by navigating to Settings > Integrations > Add Integration > Crowdstrike. Fill out the required fields as described in the linked documentation. | Docs

3. Test the integration by clicking the Test button.

Relevant Links

• All Steps: https://docs.mandiant.com/home/msv-crowdstrike-integration-with-security-validation
• 1: https://docs.mandiant.com/home/msv-crowdstrike-integration-with-security-validation#configure-crowds...
• 2: https://docs.mandiant.com/home/msv-crowdstrike-integration-with-security-validation#configure-securi...

 Snowflake

Snowflake is a leading cloud-based data warehousing platform that can be integrated with Mandiant Security Validation to provide a more holistic view of your security posture, while also providing assurance of compliance with your security policies and regulations.

 

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Administrative access to MSV Director.
• Administrative access to Snowflake.

Steps

1. Configure Snowflake, by logging into your Snowflake console and collecting the information necessary, outlined in the linked documentation. | Docs

2. Configure Security Validation, by navigating to Settings > Integrations > Add Integration > Snowflake. Fill out the required fields as described in the linked documentation. | Docs

3. Test the integration by clicking the Test button.

Relevant Links

• All Steps: https://docs.mandiant.com/home/snowflake-integration-with-security-validation
• 1: https://docs.mandiant.com/home/snowflake-integration-with-security-validation#before-you-begin
• 2: https://docs.mandiant.com/home/snowflake-integration-with-security-validation#configure-security-val...

Next Step: Mandiant Security Validation: Step 4 - Security Content

Previous Step: Mandiant Security Validation: Step 2 - Deployment