Darktrace

Supported OS Linux Windows Mac OS

marketplace
Integration version1.0.0

To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.

Overview

Darktrace is a cyber security platform that uses self-learning AI to detect and respond to threats across an organization’s network in real time. The Darktrace Threat Visualizer continuously analyzes network activity and raises model breaches whenever behavior deviates from what it has learned to be normal for a device or user.

The Darktrace integration collects model breach detections, AI Analyst incidents, and Antigena autonomous-response actions from the Darktrace Threat Visualizer API as logs in Datadog. It includes an out-of-the-box dashboard and monitor templates.

Data collected

Logs

The Darktrace integration collects logs for model breaches, AI Analyst incidents, and Antigena actions.

Events

The Darktrace integration sends an event each time it validates the Datadog logs_enabled key and the integration’s own configuration at startup.

Service checks

See service_checks.json for a list of service checks provided by this integration.

Support

For support or feature requests, contact Crest Data through the following channels:

This application is made available through the Marketplace and is supported by a Datadog Technology Partner. Click Here to purchase this application.