Skip to content
English
  • There are no suggestions because the search field is empty.

Data Integration Guide - Abnormal Security

This document explains how to integrate with Abnormal AI’s REST API with Unify to surface events and activities.


Integration Steps

  1. Log in to the Abnormal Portal.

  2. Click Settings in the left navigation menu.

  3. Click Integrations in the settings menu.

  4. Scroll down to the Additional Integrations section and click + Connect on the Abnormal REST API card to display an integration page for your organization.

  5. Copy your Access Token key to a text editor and add our required IP addresses to "IP Safelist"

  6. In Unify > Integrations, search for "Abnormal Security Client" under Available Integrations

  7. Click + Add

  8. Name the integration

  9. Click Add Integration

  10. Paste the access key into the Authorization field and Save.

ℹ️ For NA/US customers, please use 54.243.223.88/32, for EU: 34.247.15.192/32

 


Permissions 

No additional permissions are required. 

Endpoint 

Description

threats 

cases 

Get a list of threats 

Get details of an Abnormal case

threat-intel 

Get the latest threat intel feed.


Required Information 

The values Living Security will need to access the API are: 

  • Access Token