Back to Integrations
QRadar
Recorded Future
integrationQRadar node
HTTP Request
integrationRecorded Future node
HTTP Request

QRadar and Recorded Future integration

Save yourself the work of writing custom integrations for QRadar and Recorded Future and use n8n instead. Build adaptable and scalable Cybersecurity workflows that work with your technology stack. All within a building experience you will love.

Get started
See n8n in action

How to connect QRadar and Recorded Future

  • Step 1: Create a new workflow
  • Step 2: Add and configure nodes
  • Step 3: Connect
  • Step 4: Customize and extend your integration
  • Step 5: Test and activate your workflow

Step 1: Create a new workflow and add the first step

In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.

QRadar and Recorded Future integration: Create a new workflow and add the first step

Step 2: Add and configure QRadar and Recorded Future nodes using the HTTP Request nodes

You can find QRadar and Recorded Future nodes in the nodes panel and drag them onto your workflow canvas. These nodes will be added as HTTP Request nodes with pre-configured credential types. The HTTP Request node makes custom API calls to QRadar and Recorded Future. Configure QRadar and Recorded Future nodes one by one: input data on the left, parameters in the middle, and output data on the right.

QRadar and Recorded Future integration: Add and configure QRadar and Recorded Future nodes using the HTTP Request nodes

Step 3: Connect QRadar and Recorded Future

A connection establishes a link between QRadar and Recorded Future (or vice versa) to route data through the workflow. Data flows from the output of one node to the input of another. You can have single or multiple connections for each node.

QRadar and Recorded Future integration: Connect QRadar and Recorded Future

Step 4: Customize and extend your QRadar and Recorded Future integration

Use n8n's core nodes such as If, Split Out, Merge, and others to transform and manipulate data. Write custom JavaScript or Python in the Code node and run it as a step in your workflow. Connect QRadar and Recorded Future with any of n8n’s 1000+ integrations, and incorporate advanced AI logic into your workflows.

QRadar and Recorded Future integration: Customize and extend your QRadar and Recorded Future integration

Step 5: Test and activate your QRadar and Recorded Future workflow

Save and run the workflow to see if everything works as expected. Based on your configuration, data should flow from QRadar and Recorded Future or vice versa. Easily debug your workflow: you can check past executions to isolate and fix the mistake. Once you've tested everything, make sure to save your workflow and activate it.

QRadar and Recorded Future integration: Test and activate your QRadar and Recorded Future workflow

Build your own QRadar and Recorded Future integration

Create custom QRadar and Recorded Future workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.

Supported methods for QRadar

Delete
Get
Head
Options
Patch
Post
Put

Requires additional credentials set up

Use n8n’s HTTP Request node with a predefined or generic credential type to make custom API calls.

Supported API Endpoints for Recorded Future

  • Entities
  • Alerts
  • Intelligence
  • RiskLists
GetEntity
Retrieve details of a specific entity.
GET
/api/v2/entity/{entity_id}
SearchEntities
Search for entities based on criteria.
POST
/api/v2/entity/search
ListEntityTypes
List all entity types available.
GET
/api/v2/entity/types
GetEntityAssociations
Retrieve associations for a specific entity.
GET
/api/v2/entity/{entity_id}/associations
GetEntityRiskScore
Retrieve risk score for a specific entity.
GET
/api/v2/entity/{entity_id}/risk

To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetAlerts
Retrieve a list of alerts.
GET
/api/v2/alert
GetAlertDetails
Retrieve details of a specific alert.
GET
/api/v2/alert/{alert_id}
CreateAlert
Create a new alert.
POST
/api/v2/alert
UpdateAlert
Update an existing alert.
PUT
/api/v2/alert/{alert_id}
DeleteAlert
Delete a specific alert.
DELETE
/api/v2/alert/{alert_id}

To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetIntelligence
Retrieve intelligence for a specific query.
GET
/api/v2/intelligence
SearchIntelligence
Search for intelligence data.
POST
/api/v2/intelligence/search
GetIntelligenceTrending
Retrieve trending intelligence data.
GET
/api/v2/intelligence/trending
GetIntelligenceByCategory
Retrieve intelligence data by category.
GET
/api/v2/intelligence/category/{category_id}
GetIntelligenceSummary
Retrieve summary of intelligence data.
GET
/api/v2/intelligence/summary

To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

GetRiskLists
Retrieve a list of risk lists.
GET
/api/v2/risklist
GetRiskListDetails
Retrieve details of a specific risk list.
GET
/api/v2/risklist/{risklist_id}
CreateRiskList
Create a new risk list.
POST
/api/v2/risklist
UpdateRiskList
Update an existing risk list.
PUT
/api/v2/risklist/{risklist_id}
DeleteRiskList
Delete a specific risk list.
DELETE
/api/v2/risklist/{risklist_id}

To set up Recorded Future integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to Recorded Future to query the data you need using the URLs you provide.

See the example here

Take a look at the Recorded Future official documentation to get a full list of all API endpoints

QRadar and Recorded Future integration details

integrationQRadar node
HTTP Request
QRadar

QRadar is IBM's security information and event management (SIEM) software. It centralizes and analyzes log and network flow data to detect and respond to security threats. QRadar helps organizations identify and mitigate security incidents by providing real-time monitoring and in-depth analysis of security data.

integrationRecorded Future node
HTTP Request
Recorded Future

Recorded Future is a threat intelligence platform that collects and analyzes vast amounts of data from the internet to provide actionable insights on cyber threats. Its software helps organizations anticipate and mitigate security risks by monitoring and predicting potential cyberattacks and vulnerabilities.

Use case

The SOAR platform you want

Mountains of monotonous tasks make building and monitoring your workflows a chore. Not anymore.

Learn more

FAQs

  • Can QRadar connect with Recorded Future?

  • Can I use QRadar’s API with n8n?

  • Can I use Recorded Future’s API with n8n?

  • Is n8n secure for integrating QRadar and Recorded Future?

  • How to get started with QRadar and Recorded Future integration in n8n.io?

Looking to integrate QRadar and Recorded Future in your company?

Contact Sales

Over 3000 companies switch to n8n every single week

Why use n8n to integrate QRadar with Recorded Future

Build complex workflows, really fast

Build complex workflows, really fast

Handle branching, merging and iteration easily.
Pause your workflow to wait for external events.

Code when you need it, UI when you don't

Simple debugging

Your data is displayed alongside your settings, making edge cases easy to track down.

Use templates to get started fast

Use 1000+ workflow templates available from our core team and our community.

Reuse your work

Copy and paste, easily import and export workflows.

Implement complex processes faster with n8n

Get started
red iconyellow iconred iconyellow icon

Automate without limits

Made with ♥ in Berlin
Impressum | Legal | Privacy

Report a vulnerability
© 2024 n8n | All rights reserved.