Can QRadar connect with Recorded Future?

Yes, QRadar can connect with Recorded Future using n8n.io. With n8n, you can create workflows that automate tasks and transfer data between QRadar and Recorded Future. Configure nodes for QRadar and Recorded Future in the n8n interface, specifying actions and triggers to set up their connection.

Can I use QRadar’s API with n8n?

Yes, with n8n, you can programmatically interact with QRadar’s API via pre-defined supported actions or raw HTTP requests. With the HTTP Request node, you create a REST API call. You need to understand basic API terminology and concepts.

Can I use Recorded Future’s API with n8n?

Yes, with n8n, you can programmatically interact with Recorded Future’s API via pre-defined supported actions or raw HTTP requests. With the HTTP Request node, you create a REST API call. You need to understand basic API terminology and concepts.

Is n8n secure for integrating QRadar and Recorded Future?

Yes, it is safe to use n8n to integrate QRadar and Recorded Future. n8n offers various features to ensure the safe handling of your data. These include encrypted data transfers, secure credential storage, RBAC functionality, and compliance with industry-standard security practices (SOC2 compliant). For hosted plans, data is stored within the EU on servers located in Frankfurt, Germany. You can also host it on your own infrastructure for added control. Learn more about n8n’s security practices here.

How to get started with QRadar and Recorded Future integration in n8n.io?

To start integrating QRadar and Recorded Future in n8n, you have different options depending on how you intend to use it: n8n Cloud: hosted solution, no need to install anything. Self-host: recommended method for full-control or customized use cases. Unlike other platforms that charge per operation, step, or task, n8n charges only for full workflow executions. This approach guarantees predictable costs and scalability, no matter the complexity or volume of your workflows.

Back to Integrations

QRadar

Recorded Future

QRadar and Recorded Future integration

Save yourself the work of writing custom integrations for QRadar and Recorded Future and use n8n instead. Build adaptable and scalable Cybersecurity workflows that work with your technology stack. All within a building experience you will love.

Get started

See n8n in action

How to connect QRadar and Recorded Future

Step 1: Create a new workflow
Step 2: Add and configure nodes
Step 3: Connect
Step 4: Customize and extend your integration
Step 5: Test and activate your workflow

Step 1: Create a new workflow and add the first step

In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.

QRadar and Recorded Future integration: Create a new workflow and add the first step

Step 2: Add and configure QRadar and Recorded Future nodes using the HTTP Request nodes

You can find QRadar and Recorded Future nodes in the nodes panel and drag them onto your workflow canvas. These nodes will be added as HTTP Request nodes with pre-configured credential types. The HTTP Request node makes custom API calls to QRadar and Recorded Future. Configure QRadar and Recorded Future nodes one by one: input data on the left, parameters in the middle, and output data on the right.

QRadar and Recorded Future integration: Add and configure QRadar and Recorded Future nodes using the HTTP Request nodes

Step 3: Connect QRadar and Recorded Future

A connection establishes a link between QRadar and Recorded Future (or vice versa) to route data through the workflow. Data flows from the output of one node to the input of another. You can have single or multiple connections for each node.

QRadar and Recorded Future integration: Connect QRadar and Recorded Future

Step 4: Customize and extend your QRadar and Recorded Future integration

Use n8n's core nodes such as If, Split Out, Merge, and others to transform and manipulate data. Write custom JavaScript or Python in the Code node and run it as a step in your workflow. Connect QRadar and Recorded Future with any of n8n’s 1000+ integrations, and incorporate advanced AI logic into your workflows.

QRadar and Recorded Future integration: Customize and extend your QRadar and Recorded Future integration

Step 5: Test and activate your QRadar and Recorded Future workflow

Save and run the workflow to see if everything works as expected. Based on your configuration, data should flow from QRadar and Recorded Future or vice versa. Easily debug your workflow: you can check past executions to isolate and fix the mistake. Once you've tested everything, make sure to save your workflow and activate it.

QRadar and Recorded Future integration: Test and activate your QRadar and Recorded Future workflow

Build your own QRadar and Recorded Future integration

Create custom QRadar and Recorded Future workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported methods for QRadar

Delete

Get

Head

Options

Patch

Post

Put

Requires additional credentials set up

Use n8n’s HTTP Request node with a predefined or generic credential type to make custom API calls.

Supported API Endpoints for Recorded Future

Entities
Alerts
Intelligence
RiskLists

GetEntity

Retrieve details of a specific entity.

GET

/api/v2/entity/{entity_id}

SearchEntities

Search for entities based on criteria.

POST

/api/v2/entity/search

ListEntityTypes

List all entity types available.

GET

/api/v2/entity/types

GetEntityAssociations

Retrieve associations for a specific entity.

GET

/api/v2/entity/{entity_id}/associations

GetEntityRiskScore

Retrieve risk score for a specific entity.

GET

/api/v2/entity/{entity_id}/risk

To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetAlerts

Retrieve a list of alerts.

GET

/api/v2/alert

GetAlertDetails

Retrieve details of a specific alert.

GET

/api/v2/alert/{alert_id}

CreateAlert

Create a new alert.

POST

/api/v2/alert

UpdateAlert

Update an existing alert.

PUT

/api/v2/alert/{alert_id}

DeleteAlert

Delete a specific alert.

DELETE

/api/v2/alert/{alert_id}

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetIntelligence

Retrieve intelligence for a specific query.

GET

/api/v2/intelligence

SearchIntelligence

Search for intelligence data.

POST

/api/v2/intelligence/search

GetIntelligenceTrending

Retrieve trending intelligence data.

GET

/api/v2/intelligence/trending

GetIntelligenceByCategory

Retrieve intelligence data by category.

GET

/api/v2/intelligence/category/{category_id}

GetIntelligenceSummary

Retrieve summary of intelligence data.

GET

/api/v2/intelligence/summary

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetRiskLists

Retrieve a list of risk lists.

GET

/api/v2/risklist

GetRiskListDetails

Retrieve details of a specific risk list.

GET

/api/v2/risklist/{risklist_id}

CreateRiskList

Create a new risk list.

POST

/api/v2/risklist

UpdateRiskList

Update an existing risk list.

PUT

/api/v2/risklist/{risklist_id}

DeleteRiskList

Delete a specific risk list.

DELETE

/api/v2/risklist/{risklist_id}

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

QRadar and Recorded Future integration details

QRadar is IBM's security information and event management (SIEM) software. It centralizes and analyzes log and network flow data to detect and respond to security threats. QRadar helps organizations identify and mitigate security incidents by providing real-time monitoring and in-depth analysis of security data.

QRadar credentials docs

Using predefined credential types

See QRadar integrations

Related categories

Cybersecurity

Recorded Future is a threat intelligence platform that collects and analyzes vast amounts of data from the internet to provide actionable insights on cyber threats. Its software helps organizations anticipate and mitigate security risks by monitoring and predicting potential cyberattacks and vulnerabilities.

Recorded Future credentials docs

Using predefined credential types

See Recorded Future integrations

Related categories

Cybersecurity