About the Bitdefender GravityZone EDR Integration
Bitdefender GravityZone EDR is Bitdefender’s endpoint detection and response solution, delivering advanced threat detection, investigation, and automated response across endpoints, servers, and cloud workloads through a single unified console. Security teams rely on GravityZone EDR to correlate suspicious activity, visualize attack chains, and respond to threats quickly. Part of Synqly’s EDR Unified API, the Bitdefender GravityZone EDR integration enables security platforms to access normalized endpoint detection data and threat alerts through a standardized connector. Integrate with Bitdefender GravityZone EDR to route real-time endpoint threat data into your SIEM, SOAR, or security operations platform, enabling unified endpoint threat detection and response.
Integration Use Cases
Create IOCs
Creates a list of iocs that match the stix input for the EDR source.
Create Threat Note
Creates a note for a threat.
Delete IOCs
Deletes a list of iocs that match the input of ids in the query param
Get Endpoint
Gets a single endpoint assets matching the UID from the token-linked EDR source.
Get Threat Notes
Returns a list of notes for a threat.
Quarantine Endpoints
Connect or disconnect one or more endpoints assets to the network, allowing or disallowing connections.
Query Alerts
Returns a list of alerts that match the query from the token-linked EDR source.
Query Endpoints
Returns a list of endpoint assets matching the query from the token-linked EDR source.
Query IOCs
Returns a list of iocs that match the query from the token-linked EDR source.
Query Threat Events
Returns a list of threats that match the query from the token-linked EDR source.
