Data Integration Guide - Abnormal Security
This document explains how to integrate with Abnormal AI’s REST API with Unify to surface events and activities.
Integration Steps
-
Log in to the Abnormal Portal.
-
Click Settings in the left navigation menu.
-
Click Integrations in the settings menu.
-
Scroll down to the Additional Integrations section and click + Connect on the Abnormal REST API card to display an integration page for your organization.
-
Copy your Access Token key to a text editor and add our required IP addresses to "IP Safelist"
-
In Unify > Integrations, search for "Abnormal Security Client" under Available Integrations
-
Click + Add
-
Name the integration
-
Click Add Integration
-
Paste the access key into the Authorization field and Save.
ℹ️ For NA/US customers, please use 54.243.223.88/32, for EU: 34.247.15.192/32
Permissions
No additional permissions are required.
Endpoint |
Description |
threats cases |
Get a list of threats Get details of an Abnormal case |
threat-intel |
Get the latest threat intel feed. |
Required Information
The values Living Security will need to access the API are:
- Access Token