Skip to content

INTEGRATIONS.md

Latest commit

 

History

History
42 lines (30 loc) · 1.71 KB

INTEGRATIONS.md

File metadata and controls

42 lines (30 loc) · 1.71 KB

Integrations

crmsync plugs into your stack through cognis-connect, the suite's integration SDK. It maps any tool's JSON into a canonical Finding and forwards it to the platforms that fit the General OSINT / security tool domain.

pip install "git+https://github.com/cognis-digital/cognis-connect.git"

Forward findings to a platform

Once crmsync emits JSON findings, pipe them straight to a destination — --dry-run previews the exact request without sending:

crmsync ... --format json | cognis-connect emit --to stix   # STIX 2.1 bundle
crmsync ... --format json | cognis-connect emit --to slack --url $URL --token $TOK   # Slack
crmsync ... --format json | cognis-connect emit --to webhook --url $URL --token $TOK   # generic webhook

Recommended for this domain: stix, slack, webhook. The full set is stix · taxii · misp · sigma · splunk · elastic · slack · discord · webhook · brief.

From Python

normalize() maps any record (field/indicator aliases handled) into a Finding, so this works whatever crmsync outputs:

from cognis_connect import normalize, stix
findings = [normalize(rec, source="crmsync") for rec in records]   # records = your JSON output
print(stix.to_bundle(findings))

Other channels

  • AI enrichment / summaries — point add-ins at an edgemesh /v1 gateway (OPENAI_BASE_URL); cognis-connect emit --to brief writes an analyst summary.
  • Composition patterns & reference stacks — see INTEROP.md.

Integration backbone for the 300+ suite. github.com/cognis-digital