Skip to content

How to connect to CQ Threat Intelligence

How to connect to CQ Threat Intelligence.

Step 1

You must be logged in to the CyberQuest web interface with a user with administrative rights.

Navigate to "Settings > Management > Data Source Manager".

Alt text

Step 2

This page contains all the data sources added in the Cyberquest application.

Alt text

Step 3

Press the "Add data-source" button and complete de following form:

DataSource Type: Select "CQApi/Cyberquest Threat Intelligence (LogName:CQTI)" data source;

DataSource Information: This field is filled in automatically with data source information;

Query Interval: At what time interval is the WMI query executed. It is automatically completed to run every 60 seconds;

Credentials to use: Add appropriate credentials from a drop-down list;

Tag: This field is filled in automatically, but you can change the information;

Administrative Notes: You can complete with information about the added data source;

Annonymize Fields: You can select certain information to be anonymized;

Script: You can edit the data in this script;

Alt text Alt text

Click the "Save" button to save the data source.

Step 4

The next step is to assign the Cyberquest agent to this data source. Press the drop-down list and choose the agent.

Alt text

Step 5

To edit the data sources information, press "Edit" buttonAlt text. This process is almost identical to adding data sources.

You can also delete the data source by pressing "Delete" buttonAlt text. To delete data source you must remove Agent from data source.