Recorded Future Manuals

Recorded Future Configuration Guide

This guide explains how to activate and configure Recorded Future’s connector app within CTIX. It covers entering API credentials, setting up collections and risk list types for domain, URL, vulnerability, IP, and hash data feeds. The guide also describes how to use the app with CTIX Threat Visualizer to enhance threat investigation and correlation.

The configuration process involves navigating to the Integration Management module, editing settings with Base URL and API Key, and toggling the app to active status. Each data type (Domain, URL, Vulnerability, IP, Hash) requires configuring Collections and Risk List Types to receive and enrich threat intelligence feeds.

Covers: App Configuration · Action Configuration · Retrieve Domain Feeds Data · Retrieve URL Feeds Data · Retrieve Vulnerability Feeds Data · Retrieve IP Feeds Data