})
Microsoft Azure AD Inventory (Tag)
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
new file mode 100644
index 0000000000..8d44f6d09b
--- /dev/null
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
@@ -0,0 +1,95 @@
+---
+id: mandiant-threat-intel-source
+title: Mandiant Threat Intel Source
+sidebar_label: Mandiant Threat Intel
+tags:
+ - cloud-to-cloud
+ - mandiant-threat-intel
+description: Learn how to collect indicators list from Mandiant Threat Intel platform.
+---
+import CodeBlock from '@theme/CodeBlock';
+import ExampleJSON from '/files/c2c/mandiant-threat-intel/example.json';
+import MyComponentSource from '!!raw-loader!/files/c2c/mandiant-threat-intel/example.json';
+import TerraformExample from '!!raw-loader!/files/c2c/mandiant-threat-intel/example.tf';
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+
})
+
+Mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is part of Google Cloud. The Mandiant Threat Intel integration ingests the indicators data from Mandiant API and send it to Sumo as normalized threat indicators.
+
+## Data collected
+
+| Polling Interval | Data |
+| :--- | :--- |
+| 5 min | Indicators |
+
+## Setup
+
+### Vendor configuration
+
+:::note
+The Mandiant API documentation is not public and can only be accessed by partners or customers.
+:::
+
+The Mandiant Threat Intel source requires you to provide API Key ID and API Secret.
+
+### Source configuration
+
+When you create a Mandiant Threat Intel source, you add it to a Hosted Collector. Before creating the Source, identify the Hosted Collector you want to use or create a new Hosted Collector. For instructions, see [Configure a Hosted Collector and Source](/docs/send-data/hosted-collectors/configure-hosted-collector).
+
+To configure a Mandiant Threat Intel source:
+1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Collection > Collection**.
[**New UI**](/docs/get-started/sumo-logic-ui). In the Sumo Logic top menu select **Configuration**, and then under **Data Collection** select **Collection**. You can also click the **Go To...** menu at the top of the screen and select **Collection**.
+1. On the Collection page, click **Add Source** next to a Hosted Collector.
+1. Search for and select **Mandiant Threat Intel**.
+1. Enter a **Name** for the Source. The description is optional.
+1. (Optional) For **Source Category**, enter any string to tag the output collected from the source. Category metadata is stored in a searchable field called `_sourceCategory`.
+1. (Optional) **Fields**. Click the **+Add** button to define the fields you want to associate. Each field needs a name (key) and value.
+ *  A green circle with a check mark is shown when the field exists in the Fields table schema.
+ *  An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, an option to automatically add the nonexistent fields to the Fields table schema is provided. If a field is sent to Sumo Logic that does not exist in the Fields schema it is ignored, known as dropped.
+1. **API Key ID**. Enter the API key ID collected from the Mandiant Threat Intel platform.
+1. **API Secret**. Enter the API secret collected from the from the Mandiant Threat Intel platform.
+1. **Sumo Logic Threat Intel Source ID**. Enter your Sumo Logic namespace ID in which the indicators will be stored.
+1. **Polling Interval**. The polling interval is set for 5 minutes by default. You can adjust it based on your needs. This sets how often the source checks for new data.
+1. **Processing Rules for Logs**. Configure any desired filters, such as allowlist, denylist, hash, or mask, as described in [Create a Processing Rule](/docs/send-data/collection/processing-rules/create-processing-rule).
+1. When you are finished configuring the source, click **Save**.
+
+## JSON schema
+
+Sources can be configured using UTF-8 encoded JSON files with the Collector Management API. See [Use JSON to Configure Sources](/docs/send-data/use-json-configure-sources) for details.
+
+| Parameter | Type | Value | Required | Description |
+|:--|:--|:--|:--|:--|
+| schemaRef | JSON Object | `{"type":"Mandiant Threat Intel"}` | Yes | Define the specific schema type. |
+| sourceType | String | `"Universal"` | Yes | Type of source. |
+| config | JSON Object | [Configuration object](#configuration-object) | Yes | Source type specific values. |
+
+### Configuration Object
+
+| Parameter | Type | Required | Default | Description | Example |
+|:--|:--|:--|:--|:--|:--|
+| name | String | Yes | `null` | Type a desired name of the source. The name must be unique per Collector. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_source`. | `"mySource"` |
+| description | String | No | `null` | Type a description of the source. | `"Testing source"`
+| category | String | No | `null` | Type a category of the source. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_sourceCategory`. See [best practices](/docs/send-data/best-practices) for details. | `"mySource/test"`
+| fields | JSON Object | No | `null` | JSON map of key-value fields (metadata) to apply to the Collector or source. Use the boolean field _siemForward to enable forwarding to SIEM.|`{"_siemForward": false, "fieldA": "valueA"}` |
+| apiKeyId | String | Yes | `null` | API Key ID of the user. | |
+| apiSecret | String | Yes | `null` | API Secret of the account. | |
+| userSourceId | String | Yes | `null` | The Sumo Logic namespace in which the indicators will be stored. | |
+| pollingInterval | integer | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data. | |
+
+### JSON example
+
+
{MyComponentSource}
+
+
Download example
+
+### Terraform example
+
+
{TerraformExample}
+
+
Download example
+
+## FAQ
+
+:::info
+Click [here](/docs/c2c/info) for more information about Cloud-to-Cloud sources.
+:::
\ No newline at end of file
diff --git a/sidebars.ts b/sidebars.ts
index ae2c1fe5b4..0f51310624 100644
--- a/sidebars.ts
+++ b/sidebars.ts
@@ -439,6 +439,7 @@ module.exports = {
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/kandji-source',
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/knowbe4-api-source',
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/lastpass-source',
+ 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source',
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-azure-ad-inventory-source',
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-exchange-trace-logs',
'send-data/hosted-collectors/cloud-to-cloud-integration-framework/microsoft-graph-azure-ad-reporting-source',
diff --git a/static/files/c2c/mandiant-threat-intel/example.json b/static/files/c2c/mandiant-threat-intel/example.json
new file mode 100644
index 0000000000..15a00a656f
--- /dev/null
+++ b/static/files/c2c/mandiant-threat-intel/example.json
@@ -0,0 +1,17 @@
+{
+ "api.version": "v1",
+ "source": {
+ "config": {
+ "name": "Mandiant",
+ "category": "mandiant",
+ "apiKeyId": "076xxxxd69832568xxxxxe778b73f98b375",
+ "apiSecret": "fcbe4fd8ce72b5dxxxxxx10032",
+ "userSourceId": "user_source_id",
+ "pollingIntervalMin": 5
+ },
+ "schemaRef": {
+ "type": "Mandiant Threat Intel"
+ },
+ "sourceType": "Universal"
+ }
+}
diff --git a/static/files/c2c/mandiant-threat-intel/example.tf b/static/files/c2c/mandiant-threat-intel/example.tf
new file mode 100644
index 0000000000..93d63fdfec
--- /dev/null
+++ b/static/files/c2c/mandiant-threat-intel/example.tf
@@ -0,0 +1,18 @@
+resource "sumologic_cloud_to_cloud_source" "mandiant-threat-intel-source" {
+ collector_id = sumologic_collector.collector.id
+ schema_ref = {
+ type = "Mandiant Threat Intel"
+ }
+ config = jsonencode({
+ "name": "Mandiant",
+ "category": "mandiant",
+ "apiKeyId": "076xxxxd69832568xxxxxe778b73f98b375",
+ "apiSecret": "fcbe4fd8ce72b5dxxxxxx10032",
+ "userSourceId": "user_source_id",
+ "pollingIntervalMin": 5
+ })
+}
+resource "sumologic_collector" "collector" {
+ name = "my-collector"
+ description = "Just testing this"
+}
\ No newline at end of file
diff --git a/static/img/send-data/mandiant-threat-intel-logo.png b/static/img/send-data/mandiant-threat-intel-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..916977072d64b9bb9cb1e169bf4a9eaf3f331e9b
GIT binary patch
literal 9231
zcmeHsWmH^Ev+iKQT@u_S*Z{%Z2_#tXAcF*#K?WFtOVHpJWMF{c0fIXO*ANK7-6wc(
z3!KUOefRy|b??8k*8O!(uT{HhSJzX$ySn$Tu9+w;4HbMGDjWa+fUo*o@fDJ{AgKfE
z5%L<6OTGgD;FQ`cC}^oFC@^TbgKg}ctO0=MQK{*eS~@=|20DEwsd*T`W4Eh
fTrz1nx_bbC*{WHbbeYFU3W*
z6_rEuB>sHk)@^H;@RL@!C+SRU&J3GG*fG30Y0kg!DRGToQV{dxH+7u&%rz&A%@E45
zm)N);DlA4$NbE~K1qKh!czA*6=jJ8_Iwh(Sn2obi$qv~iB)l5}gCm8?GbnlXVu8me
zITcX}Q!%xY*1l0Xq1NXix*#LzXA&1}1uc34Di2pxS?4C3OIyQG6d4HZWXbJNq|EU~gYjJf
zykF3uXn{oN-Ew$_s89y%kBl%N8dsON79jeI&1YKOp!QXOC|+DJDV#VP<8c?cD;gw(
z?wIH-SninQeaNLbO$Y;xVsJ?U=SO@>S(^m>-mpamFb5INJ4?7I2Qi7;5nuClfL&_O$w9wW;!fdC
zBi6A<)vVV1sM)32-~`uUa4KHVW#jt#n;l-mEz1AE~qS~`)F1~@cpwOGgU;|
zORjv{0?%>f)YO!N6z0@)E(6Y7ox_3xL^y;%D%DJ0M((IEFsDE)LP&+rb|bq*Y{^5q
zq@)~Lf~AY2x2yM7SGrt4w_Q(1x3NUHOj=)|JfrMg36IV~ftQi9BCO~ze@q9cE0cFG
zi#E+Sg*9cE=O(*R)c>IFb_(U1t&JybIw2+Z2e%9~C?mF&$n*o)A
z${)T2nST*{E--5`?sD8UKFBxh8fsCnmXH`tJiswiGL1;&@0(o`?P(gmio>1`vrn?D
zS@<|fCR{I~E>I!ZZv7}r>;v{!uPo26eWRY4T$#o~mz833+15GEW{%5XxkjwI!CJdI
zsC6lr(y_U(X6Ym=wOy}lO0GO&T5bA%+GqOfG}!5-GgLTL*xTu8gLH$VQ^nF&+y$(>s+LW1dy+fxCG-U6&;n
z&@llE*4nrlGoRN!YLc410p=352Gz!GT4o()@62eI)s~5u$(J?#ApRu&4*tsi2mS_E
z4ObR-sCNxlOIvpC&}^!)lFot$&W8qoyR4zC(w9luNm*6%Q$J|O!(GKGJrAED!|U-U
z=pmwV#-VhW)EKtt4^$!e*aW3`J`@hLEdq5?@2MID_n*(+x_&!OI*uUjC;lEe{rq}R
zDN!hqKEEwrt>7k~r@%mIB~m+vxL>eu-ICd=+-iX0EpV~J)iv>Veuz?gOe_TuCIuFqrLyD$D^wvDze-H-5I`2O=3JuOaX&T6Js
zCSM97vq{KJbV#a{+g@>yLLUpne#?5KexE>+;?7~sB*a-Sjh{=A?xp;ZMUA+=(6JDx
zc|?*Gh1=^-IYzngOqmrWY4;_EhntNK1wQ3_7q!?zndi5)OEp}zGQ2S+Uhd87?h_|j
zVnt%q9yvQVoA+&~?IDf%o`qw>o?N#E)%ph@{E9fxQj0QJ{XVm+zQd8Qin;QI(WP;Y
zo|*k}>$&z`)~V3x%r@cO>aBuvuu1U8)x$^W_`ZRP4;**ZRs{$BFzQb76WprDM&zmF
z{!h2bK@USW#V5IJ!mLia9Bv$QwUn(!bq`6Yj$7(7yz*fJbHX?DP%pj{^V@HuxsGL1Wie%)bR@L95;Sj{D*CI7wj=u!lU_IJ
zzn1WWOiYYfnGIy_j_zH|Ozy?Rg>HP`00uM@Umol9N2yF_!
z7iJT>5b6{3g#D74oZtWMcViF(B7{we8T)8ln+*A^U*DaQK6VGbua7iV=4CUZu``{&
zIev9kDB;ZLOq-6z3u<5Y*m@;V{<~Xmrrfql3?$(J^J)JT-V+<1bs?hpVDqr>lOQ54
z+&Hc=QyeCq)w=BoJMuc}fG+G^q)KEMm_2**
z4B|Cw+jQF3{WuiZ2OLnrx!1k(nBm$mD84_r+S|4}L##Ru?L~?7f%R7C-r8PPdU8Ye
zhi>aGH|TL>$^spQV&FXNqnU#DdnM=fd=q={(&ZDmIpwivgpc_AKN>W$gzm_
zrJ+F}H^aYp`%JZm3B-Nd#`g1m`rWfkfvlXh&b`}Q;+JLf!GZmOD41`tgzq-Q{gG$a
zXlp}N8+CO6CsM`&prcR$Fpv@olB7|n|CW_eH~?sW=}`fI2zvnfzil*-{7*|j(jUyf
zI9gIT026sff+Q#$^>6DIINING2eJmNS=NvJqdbhd_AFhHH1Ts*{~
zQcQnYh$H1cY9JHCUnUSoDJDa8Ed~X!yETI_FCQ--lQa$k1B0ad8yoRgipu|nBk!b`
z>>v886t~7RWCqCI;ja01623AT4-2d|V(FP#zZ#=6^Z)KYkRgJ*?dA
zT_N^h7luE6EiA#F5Gf|6KLh>U{`H*JQ2YOk=&#C9kR0U
z9plXSsyyrat=-#5bOmNHyX4VvlzkK!;Cs2>zT@XuQ;h~mK!us0kOnUgseI_J<&uSy
zV!h&!g}>k*C1VNJz%)bVSie`%-!>Dr?}^}7uxa3D;m91
zn8b6@WB$=K;=!SzuI_iZ)o+GKJ{dO>C`1q_d3p*>e=wR=rYfmaCb#-~u=jL$Z!{D5h
zl(6%?nT2orF^_@D4i21N`?JBTtLBU=%GAV&OETf>EBHzcIYQVXdLpwi<{_MmbujC~
z$`HIn=CVS3Hax6`Uak41tc>&4C|lE1US8f@AS3KIwf%FrL@9OW9s_E}Y2;)%?XA6z
zC%HR&yrP0?b&)KM+{|VP?R#tp`^0a0DABLhd(?pNBW@M@ezg?qdpQqL^cEZJb5Hoi
zNQuXu#ReOrz=5}UZqJw!?V(TK0R8&+av9rG_wwxyQbZ=}kC|Zo@#{HBn3~sCE-2{AqUG
zJI5>ZP)$Xip1Xa-M4ENQ6Do{`AMhFZo&Wqm-EOkdfNd~SIbE-WYHA=>FENP=Sx(NW
z%~84Pww{;RQYO^P&5`fIm6>Ws8hESLi~S&l1PIe7G!vo_N`I=*ajCm^A0^ZZEY-TC
zz=kZbPHk&xj{9hinzk|qXbN-tch`H4n(uA5h?|)3J=U|;p!!Y{>=OBDUE}-_?2<*$
zjqIkgdb*&hYDN5tovgTni8mYf1?ti}*+X7oR7ilj)LmgABI7QkwMYBMG7NYh+eS%h
z?&zee3;IYB%$tv_Lc@c`ZuXW~(b1NdFgu%|XuiPJOdgT3EMbcJ2PvTWr^PT?gUVE6
z2PzElqc+XUoF`2WSfhCsE>V4Y%y)QZHFrXbl1(#ude&P`u`Pv~psW6V=BtUW<5&b?
zauq$5TFiv!4=5DVTYGz;$6@02<6xAZ{6due=|$LvyWm$o0+{cBV<@vmrh8p7)%p4r
z3gfGc`>m0MI^4l_6JfGoZTY@HQi(mKkL^*PtCMvNe}d{O`RFmesVi8CE%1C?!8}s#^>>q94|ATcATZ1w+@`mA%54UOC0F-8R?=f84(BX
z@b5L|jp)dbebz;$@Y7#y8Km#LaeqlwTWqiwtR&SDG#je7TYB?gLA1AM_PN)7C%9hK
z^>Fn|ac9d=rxv@1QLp-1GMmkK>lL`#F4{eZ@3DBTGRHGsz%FOSy#is90SjMaO&8pR
z{0om$3Nb-Z*XvxbU_-{bEaS#0<_`x6^O+MSprhlm?g%#E+3gk%Bv;ThFSx~_{y{AM
zZc~+eElGC8P)9B_g30DUAL?VbOz!DWQl$=;u-hh`#$QUZS)bo-q%qUGgeHXDQfYnFvA9b3{uNDM#-gGSX=j
zT@^>~#i4ya9%$ZeS^`-#G`-tX;%-fw(Uz;kr7(8RGEEohis{spr}HJ$+wHr
zNwMp!evdn4y?8EcV%~b7$>&m5lu!!^2@Q^p))i-Rao=6^$KKuf_4f5WJ=wBP#ezf-
z+oLQ=u#na7JiKc&l0nJLqIKZ#8%)Deti5&})L|y0TI_s{mQ{8KUVmn11C~r=hK!;s
zR_F@jZKo%e!G?@M8Nd2hpRz+Fs`cWxGD2|;
zCegkJ?6CyPRj33{t<-89x{;ZGGnOi!qfr-#qL&n7Go12t
zaCq3=Yhu>}wO!ACzE~DK?nBmBx=)h3%1ig+$hEgRh0UC2@ToPXUPn6?mqLj&fUt&WZ=eM-ZVvS#?)h`Zx%dcbrab)vqN`I{h
zaJJHUQl)<|;^ib~e-o`gvcS3e!r4l=TJbJkWf~RM_GxVJ2UA#q|A8
z4Dz0H6DL0T;ECA7C%lW>u}*^^rZI2d-CdvUhK4B=>$2*2s5w^u*?W7n!S#EOkrx@FB85CBBTm
zdWLme?}g2$;0gHY^66bT#?xnEsB0h^=DCXNAUQ(Dz_B-mBMTkObFY~t9SyHWs_OL@
zclUb2@zFZ9KVC45PjT9~`g;eBDKxb(qRlkA5WOa}vfS(TAz_&)Y)m`uc+zwu1Xd6rXcS6W=q1GZ;&ln78w6@>`v+^7-U7dI~+AH-Bq
zRe?O?Nt}N2tjsR@?{cqQU_mT?N{)=f;HQIJ?s0It;2Ou-*Qx7sT}_o(qwod-oqd00f2{xAJPeN$Ro4ZpCj`D
z%-czKh;|^bp{r>D!u+1YmN#FyPAh~AMJ`*GSp5UrFma2eYzj+IO7c7O2umzI75r)x
z1tKE8NUSdUA6iQM=bzubU&ZPYUh41fPrg<^JUDneLs&&Qaw@!%s2^}^vwazGbbCA6
z_H=KFfsqu$aCjw4Su^cn=%^JZD)QsSz=INFwOhapd0}CSlp8wv($Gn(iymi~qSEAJ
zV=o=Wfn0;aCg+R}|J(1^r#sFgSHq)YV@18aiXfx@TwGLyOdrBS)|N}@(nV)%Mpf5L
z_bOSNRz*&ZOok_8J+M(WLI@S{`pqYQ=K6^OV{g;r_|C}O^GQptEQ?a86Oq
zbJw97bG&}g@K)J@^z4L?^$Zd3@$-Br(1AE#!^HnaV1w@+Tip-K_*ekM`PFn~-aI<&
zsIBcv%0E}|gPJ>iKpIh3UfvIzjTMfv9iYsJM&B@?J)eodAG83kb$TaK`RZb(AWAw-
z&$v(7icPzFos3CLc_stUq9Nosk%kRFJ$TruTAApa@iXROWoo?->6lH?=(1RwDgzr}
z!xu_7;F3DBK;YA&?3K8}{7;Snr32+MQTDe_?`#i#ml;fT1KP{fD9y&m#*K<
zoV)eP5~fLB;Uz6w)c~>46U2w;??n8tPD$_hs?R}J=9iJED(89rDc!(}KgcXYfItGw
zgxFG2(&ZS~mFr@Zo+8W7?w)6PwbZZfzr81kJ?>d%6w~k$y`5s~xJ6L*GO0I%9nj*x
z2xw`SjvK;2T;!o5E^b8G9>W(RaNrAj8y`%9T8R
zLw}dqs;vc~FOj*eMTp@5ARd+|nhshhL1v-r-F5#h1v(32Ada>mmCN9JZxpFLGUvGW
zOnMa8nz&p7&DuV=taPX&a|oPGJrk<*=HdQ#N?Mw-wzhUkPR^l6tKVApJ6$a;*}a)6
zgDr06Z@DrCGj!5^qF+Do_lT=6G&mO^%PVadeWz^7Z@ak~)~_&$^!Ymbjq1HYiS(hN
zpNS^gb+I8EvL}r!mt6ib?NJ!;w+ek)crrORJ
ztYE3tn``Cz?Ls5Cm{}!GEAmbmblH3J%l~k$HX>65e3-M9ZFR5LBKv|`*l9I4h3tHH
zinLfW_oAhJs@wn^yiNIiycUWW&kMDi{hS9q-%VAa>umNu
z%E7|N*E`>`)mPNeh%?BjsS%i{v)3V}qvI725HPu}369b(P>yP95@kfu-=UX;!UgSr
zlqA}X!-Ge7Z;d(w{28gEIi5asn{%B<5&ODUcI6m6_SySzagO|DrSJ8LH92%HCT43S
zJ*K-`9+CMC@&uZy*z{&h~Yw9@I1ChiTnEc%HCt#d@`z)+#Su8
z0io1^SEPU4oI7qA*w_@6Yr~{`r}c8=j%KS1%#S%kczr?q5QJ72ei$_&C~zc=r?O=l
zCEaS=2-5{xtO0vvgm;6OC?H25w}sYDllJD$PE0xwgmb;dqgNdGaKC=A(6~!8tMb#=NP%W)<-j*nGw11As3?()&G1~4}&C>iT>2g&1U?1
z=!>j-Pl5vNHRGWBd5ZaGPBdhMd*~W?O`70->t>T`Uhtjm?dZ>+`6jABGQSWL%$|$2
zwwhh$t?amvi}+lo#ir(+3yc=u_EztsvRisS^PpRM6?#lTg!_BmA`MuXx#Zik5-K&<
zqelBlwsXtpTm+^$(*9*%)-2F^*a9t#&Oac7c!DDsI(AVB>g3%tG!`mD!zAFixyi_}L;tpsi77
zRAI2)rH>BAxW1fp`sr~`S5LZ-<1}<|jX>Piqy?fX#KAjKH7vX1)|?t09o-v(fvfA&
z{OS!%Uy~GM1)+1VcD@)oiGMip&CxVGMHkj3hDbLee^AlOJxXLRNTbWPMP|S>lJJKL
zEOE@cF_=V|ccaNA#!W1>$Pc~<_B`a5?eU#77uSneM<4n5Vomz;mK$TFkD-kt&EPS7
zEnYAuqQ&c=j4I8k21u`v*DkgSyhI!+Gr-!xEDi*7kYMu~@1T5c!&i-PzC
zF}(Go`*s)dMb%@dpj(^tT
z%(PEI+b!c=c!2KUVPJS{u3#H#w+GtgCN9LRbj@1R#T8k493o3_`{_>^uj4kiv^Azr
zEc>=J8@`f$ePAC)bMJY6vCP75!@`~-XqRx5%fI=RL@bI0n{Q}}GO5cTOU0e0YD^VN
zDrsNp=jKrIu-Wa!!|m^Hp_qh8=qbo&RdGL<(=$UYavCD1TMtxhNHQ^HoV#riezTbz
zKHuQ{!kzM)Rc++RNGfsCNCJzmxizRVW3txv+m9mkqvdv04HKT)%FZ_JG#E@hnN6Ju
zn;$5cu)n4{ru|&l(m+f)K|#2X7+ms8s+E2D_;m}U^aSRNA&>KX9F38$39}uULE7JT
zXXYWf0vcN587E-;d>7j>9Le$V@fN?A17v5)**{U10c1r4`CMOAp#n^+az5LXpaPc0
jzkK2OUkCrK7(8Ii>oV0jNihETg9M
Date: Wed, 20 Nov 2024 09:16:49 -0600
Subject: [PATCH 2/8] Move product list entry
---
docs/integrations/product-list/product-list-a-l.md | 2 +-
docs/integrations/product-list/product-list-m-z.md | 1 -
2 files changed, 1 insertion(+), 2 deletions(-)
diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md
index 554f2ee01d..9b223e3bc2 100644
--- a/docs/integrations/product-list/product-list-a-l.md
+++ b/docs/integrations/product-list/product-list-a-l.md
@@ -249,7 +249,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| })
| [GitHub](https://github.com/) | App: [GitHub](/docs/integrations/app-development/github/)
Automation integration: [GitHub](/docs/platform-services/automation-service/app-central/integrations/github/)
Cloud SIEM integration: [Github](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/193c791a-bb10-4742-a429-1256535f888b.md#vendors-github)
Community app: [Sumo Logic for GitHub Actions](https://github.com/SumoLogic/sumologic-content/tree/master/GitHub/GitHub_Actions) |
| })
| [GitLab](https://about.gitlab.com/) | App: [GitLab](/docs/integrations/app-development/gitlab/)
Automation integration: [GitLab](/docs/platform-services/automation-service/app-central/integrations/gitlab/) |
| })
| [Gmail](https://www.google.com/gmail/about/) | App: [Gmail Trace Logs](/docs/integrations/saas-cloud/gmail-tracelogs)
Automation integrations:
- [Gmail](/docs/platform-services/automation-service/app-central/integrations/gmail/)
- [Gmail Multiple Mailbox](/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox/)
Collector: [Gmail Trace Logs Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/gmail-tracelogs-source) |
-| })
| [Google](https://about.google/) | Apps:
- [Google App Engine](/docs/integrations/google/app-engine/)
- [Google BigQuery](/docs/integrations/google/bigquery/)
- [Google Cloud AlloyDB for PostgreSQL](/docs/integrations/google/cloud-alloydb-for-postgresql/)
- [Google Cloud API Gateway](/docs/integrations/google/cloud-api-gateway/)
- [Google Cloud APIs](/docs/integrations/google/cloud-apis/)
- [Google Cloud Armor](/docs/integrations/google/cloud-armor/)
- [Google Cloud Audit](/docs/integrations/google/cloud-audit)
- [Google Cloud Auto Scaler](/docs/integrations/google/cloud-auto-scaler)
- [Google Cloud Backup for GKE](/docs/integrations/google/cloud-backup-for-gke/)
- [Google Cloud BigQuery BI Engine](/docs/integrations/google/cloud-bigquery-bi-engine/)
- [Google Cloud Bigtable](/docs/integrations/google/cloud-bigtable/)
- [Google Cloud Certificate Authority Service](/docs/integrations/google/cloud-certificate-authority-service/)
- [Google Cloud Certificate Manager](/docs/integrations/google/cloud-certificate-manager/)
- [Google Cloud Composer](/docs/integrations/google/cloud-composer/)
- [Google Compute Engine](/docs/integrations/google/compute-engine/)
- [Google Cloud Dataflow](/docs/integrations/google/cloud-dataflow/)
- [Google Cloud Dataproc](/docs/integrations/google/cloud-dataproc/)
- [Google Cloud Dataproc Metastore](/docs/integrations/google/cloud-dataproc-metastore/)
- [Google Cloud Datastore](/docs/integrations/google/cloud-datastore/)
- [Google Cloud Datastream](/docs/integrations/google/cloud-datastream/)
- [Google Cloud Deploy](/docs/integrations/google/cloud-deploy/)
- [Google Cloud Filestore](/docs/integrations/google/cloud-filestore/)
- [Google Cloud Firebase](/docs/integrations/google/cloud-firebase/)
- [Google Cloud Firestore](/docs/integrations/google/cloud-firestore/)
- [Google Cloud Firewall](/docs/integrations/google/cloud-firewall/)
- [Google Cloud Fleet Engine](/docs/integrations/google/cloud-fleet-engine/)
- [Google Cloud Functions](/docs/integrations/google/cloud-functions/)
- [Google Cloud Interconnect](/docs/integrations/google/cloud-interconnect/)
- [Google Cloud Load Balancing](/docs/integrations/google/cloud-load-balancing/)
- [Google Cloud Logging](/docs/integrations/google/cloud-logging/)
- [Google Cloud Memorystore for Redis](/docs/integrations/google/cloud-memorystore-for-redis/)
- [Google Cloud Net App Cloud Volumes Service](/docs/integrations/google/cloud-net-app-cloud-volumes-service/)
- [Google Cloud Network Topology](/docs/integrations/google/cloud-network-topology/)
- [Google Cloud Pub Sub](/docs/integrations/google/cloud-pub-sub/)
- [Google Cloud Router](/docs/integrations/google/cloud-router/)
- [Google Cloud Run](/docs/integrations/google/cloud-run/)
- [Google Cloud Spanner](/docs/integrations/google/cloud-spanner/)
- [Google Cloud SQL](/docs/integrations/google/cloud-sql/)
- [Google Cloud Storage](/docs/integrations/google/cloud-storage/)
- [Google Cloud Tasks](/docs/integrations/google/cloud-tasks/)
- [Google Cloud TPU](/docs/integrations/google/cloud-tpu/)
- [Google Cloud Trace](/docs/integrations/google/cloud-trace/)
- [Google Cloud Traffic Director](/docs/integrations/google/cloud-traffic-director/)
- [Google Cloud Vertex AI](/docs/integrations/google/cloud-vertex-ai/)
- [Google Cloud VPC](/docs/integrations/google/cloud-vpc/)
- [Google Cloud VPN](/docs/integrations/google/cloud-vpn/)
- [Google Kubernetes Engine (GKE)](/docs/integrations/google/kubernetes-engine/)
Automation integrations:
- [Chronicle](/docs/platform-services/automation-service/app-central/integrations/chronicle/)
- [Google Chat](/docs/platform-services/automation-service/app-central/integrations/google-chat/)
- [Google Safe Browsing](/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing/)
- [Mandiant Advantage Threat intelligence](/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence/)
Cloud SIEM integration: [Google](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/45601247-66a5-4c9c-b3af-c422f5b4cbeb.md)
Collectors:
- [Google BigQuery Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-bigquery-source/)
- [GCP Metrics Source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/)
- [Google Cloud Platform (GCP) Source](/docs/send-data/hosted-collectors/google-source/google-cloud-platform-source/)
Community app: [Sumo Logic for GCP Balancer Metrics](https://github.com/SumoLogic/sumologic-content/tree/master/GCP/Load_Balancer_Metrics) |
+| | [Google](https://about.google/) | Apps:
- [Google App Engine](/docs/integrations/google/app-engine/)
- [Google BigQuery](/docs/integrations/google/bigquery/)
- [Google Cloud AlloyDB for PostgreSQL](/docs/integrations/google/cloud-alloydb-for-postgresql/)
- [Google Cloud API Gateway](/docs/integrations/google/cloud-api-gateway/)
- [Google Cloud APIs](/docs/integrations/google/cloud-apis/)
- [Google Cloud Armor](/docs/integrations/google/cloud-armor/)
- [Google Cloud Audit](/docs/integrations/google/cloud-audit)
- [Google Cloud Auto Scaler](/docs/integrations/google/cloud-auto-scaler)
- [Google Cloud Backup for GKE](/docs/integrations/google/cloud-backup-for-gke/)
- [Google Cloud BigQuery BI Engine](/docs/integrations/google/cloud-bigquery-bi-engine/)
- [Google Cloud Bigtable](/docs/integrations/google/cloud-bigtable/)
- [Google Cloud Certificate Authority Service](/docs/integrations/google/cloud-certificate-authority-service/)
- [Google Cloud Certificate Manager](/docs/integrations/google/cloud-certificate-manager/)
- [Google Cloud Composer](/docs/integrations/google/cloud-composer/)
- [Google Compute Engine](/docs/integrations/google/compute-engine/)
- [Google Cloud Dataflow](/docs/integrations/google/cloud-dataflow/)
- [Google Cloud Dataproc](/docs/integrations/google/cloud-dataproc/)
- [Google Cloud Dataproc Metastore](/docs/integrations/google/cloud-dataproc-metastore/)
- [Google Cloud Datastore](/docs/integrations/google/cloud-datastore/)
- [Google Cloud Datastream](/docs/integrations/google/cloud-datastream/)
- [Google Cloud Deploy](/docs/integrations/google/cloud-deploy/)
- [Google Cloud Filestore](/docs/integrations/google/cloud-filestore/)
- [Google Cloud Firebase](/docs/integrations/google/cloud-firebase/)
- [Google Cloud Firestore](/docs/integrations/google/cloud-firestore/)
- [Google Cloud Firewall](/docs/integrations/google/cloud-firewall/)
- [Google Cloud Fleet Engine](/docs/integrations/google/cloud-fleet-engine/)
- [Google Cloud Functions](/docs/integrations/google/cloud-functions/)
- [Google Cloud Interconnect](/docs/integrations/google/cloud-interconnect/)
- [Google Cloud Load Balancing](/docs/integrations/google/cloud-load-balancing/)
- [Google Cloud Logging](/docs/integrations/google/cloud-logging/)
- [Google Cloud Memorystore for Redis](/docs/integrations/google/cloud-memorystore-for-redis/)
- [Google Cloud Net App Cloud Volumes Service](/docs/integrations/google/cloud-net-app-cloud-volumes-service/)
- [Google Cloud Network Topology](/docs/integrations/google/cloud-network-topology/)
- [Google Cloud Pub Sub](/docs/integrations/google/cloud-pub-sub/)
- [Google Cloud Router](/docs/integrations/google/cloud-router/)
- [Google Cloud Run](/docs/integrations/google/cloud-run/)
- [Google Cloud Spanner](/docs/integrations/google/cloud-spanner/)
- [Google Cloud SQL](/docs/integrations/google/cloud-sql/)
- [Google Cloud Storage](/docs/integrations/google/cloud-storage/)
- [Google Cloud Tasks](/docs/integrations/google/cloud-tasks/)
- [Google Cloud TPU](/docs/integrations/google/cloud-tpu/)
- [Google Cloud Trace](/docs/integrations/google/cloud-trace/)
- [Google Cloud Traffic Director](/docs/integrations/google/cloud-traffic-director/)
- [Google Cloud Vertex AI](/docs/integrations/google/cloud-vertex-ai/)
- [Google Cloud VPC](/docs/integrations/google/cloud-vpc/)
- [Google Cloud VPN](/docs/integrations/google/cloud-vpn/)
- [Google Kubernetes Engine (GKE)](/docs/integrations/google/kubernetes-engine/)
Automation integrations:
- [Chronicle](/docs/platform-services/automation-service/app-central/integrations/chronicle/)
- [Google Chat](/docs/platform-services/automation-service/app-central/integrations/google-chat/)
- [Google Safe Browsing](/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing/)
- [Mandiant Advantage Threat intelligence](/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence/)
Cloud SIEM integration: [Google](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/45601247-66a5-4c9c-b3af-c422f5b4cbeb.md)
Collectors:
- [Google BigQuery Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-bigquery-source/)
- [GCP Metrics Source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/)
- [Google Cloud Platform (GCP) Source](/docs/send-data/hosted-collectors/google-source/google-cloud-platform-source/)
- [Mandiant Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source/)
Community app: [Sumo Logic for GCP Balancer Metrics](https://github.com/SumoLogic/sumologic-content/tree/master/GCP/Load_Balancer_Metrics) |
| })
| [Google Workspace](https://workspace.google.com/) | App: [Google Workspace](/docs/integrations/google/workspace/install-app-dashboards/)
Automation integrations:
- [Google Alert Center](/docs/platform-services/automation-service/app-central/integrations/google-alert-center/)
- [Google Admin](/docs/platform-services/automation-service/app-central/integrations/google-admin/)
- [Google Drive](/docs/platform-services/automation-service/app-central/integrations/google-drive/)
Collector: [Google Workspace AlertCenter Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-workspace-alertcenter/)
- [Google Workspace Apps Audit - Cloud SIEM](/docs/cse/ingestion/ingestion-sources-for-cloud-siem/google-workspace-apps-audit/)
- [Google Workspace Apps Audit Source](/docs/send-data/hosted-collectors/google-source/google-workspace-apps-audit-source/)
- [Google Workspace User Inventory Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-workspace-source/)
- [G Suite Alert Center - Cloud SIEM](/docs/cse/ingestion/ingestion-sources-for-cloud-siem/g-suite-alert-center/) |
| })
| [Grafana](https://grafana.com/) | Webhook: [Grafana OnCall](/docs/integrations/webhooks/grafana-oncall/) |
| })
| [Gremlin](https://www.gremlin.com/) | Webhook: [Gremlin](/docs/integrations/webhooks/gremlin/) |
diff --git a/docs/integrations/product-list/product-list-m-z.md b/docs/integrations/product-list/product-list-m-z.md
index 7a59a28103..42d901325a 100644
--- a/docs/integrations/product-list/product-list-m-z.md
+++ b/docs/integrations/product-list/product-list-m-z.md
@@ -19,7 +19,6 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| })
| [Mailgun](https://www.mailgun.com/) | Webhook: [Mailgun](/docs/integrations/webhooks/mailgun/) |
| })
| [Malwarebytes](https://www.malwarebytes.com/) | Automation integrations:
- [Malwarebytes Nebula](/docs/platform-services/automation-service/app-central/integrations/malwarebytes-nebula/)
- [Malwarebytes Oneview](/docs/platform-services/automation-service/app-central/integrations/malwarebytes-oneview/)
Cloud SIEM integration: [Malwarebytes](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/2e08dea2-4048-4f0f-9af8-aa85881151ad.md) |
| })
| [ManageEngine](https://www.manageengine.com/) | Automation integration: [ManageEngine Desktop Central](/docs/platform-services/automation-service/app-central/integrations/manage-engine-desktop-central/)
Cloud SIEM integration: [ManageEngine](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/e6417fdd-1aa1-436e-a659-38d71e51599f.md) |
-| | [Mandiant Threat Intel](https://www.mandiant.com/) | Collector: [Mandiant Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source/) |
| })
| [MariaDB](https://mariadb.org/) | Apps:
- [MariaDB](/docs/integrations/databases/mariadb/)
- [MariaDB - OpenTelemetry](/docs/integrations/databases/opentelemetry/mariadb-opentelemetry/) |
| })
| [Material Security](https://material.security/) | Automation integration: [Material Security](/docs/platform-services/automation-service/app-central/integrations/material-security/) |
| })
| [Mattermost](https://mattermost.com/) | Automation integration: [Mattermost](/docs/platform-services/automation-service/app-central/integrations/mattermost/) |
From 09a9cec07c3d9b0a4fcdde8d01af1aab411ecb6b Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Fri, 22 Nov 2024 12:40:50 +0530
Subject: [PATCH 3/8] Update
docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
Co-authored-by: John Pipkin (Sumo Logic)
---
.../mandiant-threat-intel-source.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
index 8d44f6d09b..51882d58c1 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
@@ -15,7 +15,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
-Mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is part of Google Cloud. The Mandiant Threat Intel integration ingests the indicators data from Mandiant API and send it to Sumo as normalized threat indicators.
+Mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is part of Google Cloud. The Mandiant Threat Intel integration ingests the indicators data from Mandiant API and sends it to Sumo Logic as normalized threat indicators.
## Data collected
From 6f10b0eaf03b5ab1db3c0c9a9140f8b37556cdf0 Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Fri, 22 Nov 2024 12:42:52 +0530
Subject: [PATCH 4/8] Update
docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
Co-authored-by: John Pipkin (Sumo Logic)
---
.../mandiant-threat-intel-source.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
index 51882d58c1..a924f42d68 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
@@ -70,7 +70,7 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Mana
| name | String | Yes | `null` | Type a desired name of the source. The name must be unique per Collector. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_source`. | `"mySource"` |
| description | String | No | `null` | Type a description of the source. | `"Testing source"`
| category | String | No | `null` | Type a category of the source. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_sourceCategory`. See [best practices](/docs/send-data/best-practices) for details. | `"mySource/test"`
-| fields | JSON Object | No | `null` | JSON map of key-value fields (metadata) to apply to the Collector or source. Use the boolean field _siemForward to enable forwarding to SIEM.|`{"_siemForward": false, "fieldA": "valueA"}` |
+| fields | JSON Object | No | `null` | JSON map of key-value fields (metadata) to apply to the Collector or source. Use the boolean field `_siemForward` to enable forwarding to SIEM.|`{"_siemForward": false, "fieldA": "valueA"}` |
| apiKeyId | String | Yes | `null` | API Key ID of the user. | |
| apiSecret | String | Yes | `null` | API Secret of the account. | |
| userSourceId | String | Yes | `null` | The Sumo Logic namespace in which the indicators will be stored. | |
From 62a0fe6bbc0f22c2c58e0abad35b83b4dd59eafd Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Fri, 22 Nov 2024 12:42:57 +0530
Subject: [PATCH 5/8] Update
docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
Co-authored-by: John Pipkin (Sumo Logic)
---
.../mandiant-threat-intel-source.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
index a924f42d68..59cf940ca9 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
@@ -35,7 +35,7 @@ The Mandiant Threat Intel source requires you to provide API Key ID and API Secr
### Source configuration
-When you create a Mandiant Threat Intel source, you add it to a Hosted Collector. Before creating the Source, identify the Hosted Collector you want to use or create a new Hosted Collector. For instructions, see [Configure a Hosted Collector and Source](/docs/send-data/hosted-collectors/configure-hosted-collector).
+When you create a Mandiant Threat Intel source, you add it to a Hosted Collector. Before creating the source, identify the Hosted Collector you want to use or create a new Hosted Collector. For instructions, see [Configure a Hosted Collector and Source](/docs/send-data/hosted-collectors/configure-hosted-collector).
To configure a Mandiant Threat Intel source:
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Collection > Collection**.
[**New UI**](/docs/get-started/sumo-logic-ui). In the Sumo Logic top menu select **Configuration**, and then under **Data Collection** select **Collection**. You can also click the **Go To...** menu at the top of the screen and select **Collection**.
From 63fe92599a830ab20621059af8a25a0974da9897 Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Fri, 22 Nov 2024 12:43:03 +0530
Subject: [PATCH 6/8] Update
docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
Co-authored-by: John Pipkin (Sumo Logic)
---
.../mandiant-threat-intel-source.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
index 59cf940ca9..61ee793c98 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source.md
@@ -41,7 +41,7 @@ To configure a Mandiant Threat Intel source:
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Collection > Collection**.
[**New UI**](/docs/get-started/sumo-logic-ui). In the Sumo Logic top menu select **Configuration**, and then under **Data Collection** select **Collection**. You can also click the **Go To...** menu at the top of the screen and select **Collection**.
1. On the Collection page, click **Add Source** next to a Hosted Collector.
1. Search for and select **Mandiant Threat Intel**.
-1. Enter a **Name** for the Source. The description is optional.
+1. Enter a **Name** for the source. The description is optional.
1. (Optional) For **Source Category**, enter any string to tag the output collected from the source. Category metadata is stored in a searchable field called `_sourceCategory`.
1. (Optional) **Fields**. Click the **+Add** button to define the fields you want to associate. Each field needs a name (key) and value.
*  A green circle with a check mark is shown when the field exists in the Fields table schema.
From 778bbce1e9a313ca5708307e09a03724d3baf3f9 Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Fri, 22 Nov 2024 17:56:46 +0530
Subject: [PATCH 7/8] Rename 2024-11-22-collection.md to
2024-11-23-collection.md
---
.../{2024-11-22-collection.md => 2024-11-23-collection.md} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename blog-service/{2024-11-22-collection.md => 2024-11-23-collection.md} (93%)
diff --git a/blog-service/2024-11-22-collection.md b/blog-service/2024-11-23-collection.md
similarity index 93%
rename from blog-service/2024-11-22-collection.md
rename to blog-service/2024-11-23-collection.md
index 328a680555..edeefc99e5 100644
--- a/blog-service/2024-11-22-collection.md
+++ b/blog-service/2024-11-23-collection.md
@@ -11,4 +11,4 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
})
-We're excited to announce the release of our new cloud-to-cloud source for Mandiant Threat Intel. This source helps you to collect indicators list details from the Mandiant Threat Intel platform, and ingest them into Sumo Logic for streamlined analysis. [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source).
\ No newline at end of file
+We're excited to announce the release of our new cloud-to-cloud source for Mandiant Threat Intel. This source helps you to collect indicators list details from the Mandiant Threat Intel platform, and ingest them into Sumo Logic for streamlined analysis. [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source).
From e384e0d546a54fdf2067150d23987b97b3c37280 Mon Sep 17 00:00:00 2001
From: Jagadisha V <129049263+JV0812@users.noreply.github.com>
Date: Wed, 27 Nov 2024 10:54:01 +0530
Subject: [PATCH 8/8] updated for beta release
---
blog-service/2024-11-23-collection.md | 14 --------------
docs/integrations/product-list/product-list-a-l.md | 2 +-
.../cloud-to-cloud-integration-framework/index.md | 6 ------
.../mandiant-threat-intel-source.md | 10 ++++++++--
sidebars.ts | 2 +-
5 files changed, 10 insertions(+), 24 deletions(-)
delete mode 100644 blog-service/2024-11-23-collection.md
diff --git a/blog-service/2024-11-23-collection.md b/blog-service/2024-11-23-collection.md
deleted file mode 100644
index edeefc99e5..0000000000
--- a/blog-service/2024-11-23-collection.md
+++ /dev/null
@@ -1,14 +0,0 @@
----
-title: Mandiant Threat Intel C2C Source (Collection)
-image: https://help.sumologic.com/img/sumo-square.png
-keywords:
- - collection
- - mandiant-threat-intel
-hide_table_of_contents: true
----
-
-import useBaseUrl from '@docusaurus/useBaseUrl';
-
-
-
-We're excited to announce the release of our new cloud-to-cloud source for Mandiant Threat Intel. This source helps you to collect indicators list details from the Mandiant Threat Intel platform, and ingest them into Sumo Logic for streamlined analysis. [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source).
diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md
index 9b223e3bc2..554f2ee01d 100644
--- a/docs/integrations/product-list/product-list-a-l.md
+++ b/docs/integrations/product-list/product-list-a-l.md
@@ -249,7 +249,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [
| | [GitHub](https://github.com/) | App: [GitHub](/docs/integrations/app-development/github/)
Automation integration: [GitHub](/docs/platform-services/automation-service/app-central/integrations/github/)
Cloud SIEM integration: [Github](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/193c791a-bb10-4742-a429-1256535f888b.md#vendors-github)
Community app: [Sumo Logic for GitHub Actions](https://github.com/SumoLogic/sumologic-content/tree/master/GitHub/GitHub_Actions) |
| | [GitLab](https://about.gitlab.com/) | App: [GitLab](/docs/integrations/app-development/gitlab/)
Automation integration: [GitLab](/docs/platform-services/automation-service/app-central/integrations/gitlab/) |
| | [Gmail](https://www.google.com/gmail/about/) | App: [Gmail Trace Logs](/docs/integrations/saas-cloud/gmail-tracelogs)
Automation integrations:
- [Gmail](/docs/platform-services/automation-service/app-central/integrations/gmail/)
- [Gmail Multiple Mailbox](/docs/platform-services/automation-service/app-central/integrations/gmail-multiple-mailbox/)
Collector: [Gmail Trace Logs Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/gmail-tracelogs-source) |
-| | [Google](https://about.google/) | Apps:
- [Google App Engine](/docs/integrations/google/app-engine/)
- [Google BigQuery](/docs/integrations/google/bigquery/)
- [Google Cloud AlloyDB for PostgreSQL](/docs/integrations/google/cloud-alloydb-for-postgresql/)
- [Google Cloud API Gateway](/docs/integrations/google/cloud-api-gateway/)
- [Google Cloud APIs](/docs/integrations/google/cloud-apis/)
- [Google Cloud Armor](/docs/integrations/google/cloud-armor/)
- [Google Cloud Audit](/docs/integrations/google/cloud-audit)
- [Google Cloud Auto Scaler](/docs/integrations/google/cloud-auto-scaler)
- [Google Cloud Backup for GKE](/docs/integrations/google/cloud-backup-for-gke/)
- [Google Cloud BigQuery BI Engine](/docs/integrations/google/cloud-bigquery-bi-engine/)
- [Google Cloud Bigtable](/docs/integrations/google/cloud-bigtable/)
- [Google Cloud Certificate Authority Service](/docs/integrations/google/cloud-certificate-authority-service/)
- [Google Cloud Certificate Manager](/docs/integrations/google/cloud-certificate-manager/)
- [Google Cloud Composer](/docs/integrations/google/cloud-composer/)
- [Google Compute Engine](/docs/integrations/google/compute-engine/)
- [Google Cloud Dataflow](/docs/integrations/google/cloud-dataflow/)
- [Google Cloud Dataproc](/docs/integrations/google/cloud-dataproc/)
- [Google Cloud Dataproc Metastore](/docs/integrations/google/cloud-dataproc-metastore/)
- [Google Cloud Datastore](/docs/integrations/google/cloud-datastore/)
- [Google Cloud Datastream](/docs/integrations/google/cloud-datastream/)
- [Google Cloud Deploy](/docs/integrations/google/cloud-deploy/)
- [Google Cloud Filestore](/docs/integrations/google/cloud-filestore/)
- [Google Cloud Firebase](/docs/integrations/google/cloud-firebase/)
- [Google Cloud Firestore](/docs/integrations/google/cloud-firestore/)
- [Google Cloud Firewall](/docs/integrations/google/cloud-firewall/)
- [Google Cloud Fleet Engine](/docs/integrations/google/cloud-fleet-engine/)
- [Google Cloud Functions](/docs/integrations/google/cloud-functions/)
- [Google Cloud Interconnect](/docs/integrations/google/cloud-interconnect/)
- [Google Cloud Load Balancing](/docs/integrations/google/cloud-load-balancing/)
- [Google Cloud Logging](/docs/integrations/google/cloud-logging/)
- [Google Cloud Memorystore for Redis](/docs/integrations/google/cloud-memorystore-for-redis/)
- [Google Cloud Net App Cloud Volumes Service](/docs/integrations/google/cloud-net-app-cloud-volumes-service/)
- [Google Cloud Network Topology](/docs/integrations/google/cloud-network-topology/)
- [Google Cloud Pub Sub](/docs/integrations/google/cloud-pub-sub/)
- [Google Cloud Router](/docs/integrations/google/cloud-router/)
- [Google Cloud Run](/docs/integrations/google/cloud-run/)
- [Google Cloud Spanner](/docs/integrations/google/cloud-spanner/)
- [Google Cloud SQL](/docs/integrations/google/cloud-sql/)
- [Google Cloud Storage](/docs/integrations/google/cloud-storage/)
- [Google Cloud Tasks](/docs/integrations/google/cloud-tasks/)
- [Google Cloud TPU](/docs/integrations/google/cloud-tpu/)
- [Google Cloud Trace](/docs/integrations/google/cloud-trace/)
- [Google Cloud Traffic Director](/docs/integrations/google/cloud-traffic-director/)
- [Google Cloud Vertex AI](/docs/integrations/google/cloud-vertex-ai/)
- [Google Cloud VPC](/docs/integrations/google/cloud-vpc/)
- [Google Cloud VPN](/docs/integrations/google/cloud-vpn/)
- [Google Kubernetes Engine (GKE)](/docs/integrations/google/kubernetes-engine/)
Automation integrations:
- [Chronicle](/docs/platform-services/automation-service/app-central/integrations/chronicle/)
- [Google Chat](/docs/platform-services/automation-service/app-central/integrations/google-chat/)
- [Google Safe Browsing](/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing/)
- [Mandiant Advantage Threat intelligence](/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence/)
Cloud SIEM integration: [Google](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/45601247-66a5-4c9c-b3af-c422f5b4cbeb.md)
Collectors:
- [Google BigQuery Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-bigquery-source/)
- [GCP Metrics Source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/)
- [Google Cloud Platform (GCP) Source](/docs/send-data/hosted-collectors/google-source/google-cloud-platform-source/)
- [Mandiant Threat Intel Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/mandiant-threat-intel-source/)
Community app: [Sumo Logic for GCP Balancer Metrics](https://github.com/SumoLogic/sumologic-content/tree/master/GCP/Load_Balancer_Metrics) |
+| | [Google](https://about.google/) | Apps:
- [Google App Engine](/docs/integrations/google/app-engine/)
- [Google BigQuery](/docs/integrations/google/bigquery/)
- [Google Cloud AlloyDB for PostgreSQL](/docs/integrations/google/cloud-alloydb-for-postgresql/)
- [Google Cloud API Gateway](/docs/integrations/google/cloud-api-gateway/)
- [Google Cloud APIs](/docs/integrations/google/cloud-apis/)
- [Google Cloud Armor](/docs/integrations/google/cloud-armor/)
- [Google Cloud Audit](/docs/integrations/google/cloud-audit)
- [Google Cloud Auto Scaler](/docs/integrations/google/cloud-auto-scaler)
- [Google Cloud Backup for GKE](/docs/integrations/google/cloud-backup-for-gke/)
- [Google Cloud BigQuery BI Engine](/docs/integrations/google/cloud-bigquery-bi-engine/)
- [Google Cloud Bigtable](/docs/integrations/google/cloud-bigtable/)
- [Google Cloud Certificate Authority Service](/docs/integrations/google/cloud-certificate-authority-service/)
- [Google Cloud Certificate Manager](/docs/integrations/google/cloud-certificate-manager/)
- [Google Cloud Composer](/docs/integrations/google/cloud-composer/)
- [Google Compute Engine](/docs/integrations/google/compute-engine/)
- [Google Cloud Dataflow](/docs/integrations/google/cloud-dataflow/)
- [Google Cloud Dataproc](/docs/integrations/google/cloud-dataproc/)
- [Google Cloud Dataproc Metastore](/docs/integrations/google/cloud-dataproc-metastore/)
- [Google Cloud Datastore](/docs/integrations/google/cloud-datastore/)
- [Google Cloud Datastream](/docs/integrations/google/cloud-datastream/)
- [Google Cloud Deploy](/docs/integrations/google/cloud-deploy/)
- [Google Cloud Filestore](/docs/integrations/google/cloud-filestore/)
- [Google Cloud Firebase](/docs/integrations/google/cloud-firebase/)
- [Google Cloud Firestore](/docs/integrations/google/cloud-firestore/)
- [Google Cloud Firewall](/docs/integrations/google/cloud-firewall/)
- [Google Cloud Fleet Engine](/docs/integrations/google/cloud-fleet-engine/)
- [Google Cloud Functions](/docs/integrations/google/cloud-functions/)
- [Google Cloud Interconnect](/docs/integrations/google/cloud-interconnect/)
- [Google Cloud Load Balancing](/docs/integrations/google/cloud-load-balancing/)
- [Google Cloud Logging](/docs/integrations/google/cloud-logging/)
- [Google Cloud Memorystore for Redis](/docs/integrations/google/cloud-memorystore-for-redis/)
- [Google Cloud Net App Cloud Volumes Service](/docs/integrations/google/cloud-net-app-cloud-volumes-service/)
- [Google Cloud Network Topology](/docs/integrations/google/cloud-network-topology/)
- [Google Cloud Pub Sub](/docs/integrations/google/cloud-pub-sub/)
- [Google Cloud Router](/docs/integrations/google/cloud-router/)
- [Google Cloud Run](/docs/integrations/google/cloud-run/)
- [Google Cloud Spanner](/docs/integrations/google/cloud-spanner/)
- [Google Cloud SQL](/docs/integrations/google/cloud-sql/)
- [Google Cloud Storage](/docs/integrations/google/cloud-storage/)
- [Google Cloud Tasks](/docs/integrations/google/cloud-tasks/)
- [Google Cloud TPU](/docs/integrations/google/cloud-tpu/)
- [Google Cloud Trace](/docs/integrations/google/cloud-trace/)
- [Google Cloud Traffic Director](/docs/integrations/google/cloud-traffic-director/)
- [Google Cloud Vertex AI](/docs/integrations/google/cloud-vertex-ai/)
- [Google Cloud VPC](/docs/integrations/google/cloud-vpc/)
- [Google Cloud VPN](/docs/integrations/google/cloud-vpn/)
- [Google Kubernetes Engine (GKE)](/docs/integrations/google/kubernetes-engine/)
Automation integrations:
- [Chronicle](/docs/platform-services/automation-service/app-central/integrations/chronicle/)
- [Google Chat](/docs/platform-services/automation-service/app-central/integrations/google-chat/)
- [Google Safe Browsing](/docs/platform-services/automation-service/app-central/integrations/google-safe-browsing/)
- [Mandiant Advantage Threat intelligence](/docs/platform-services/automation-service/app-central/integrations/mandiant-advantage-threat-intelligence/)
Cloud SIEM integration: [Google](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/45601247-66a5-4c9c-b3af-c422f5b4cbeb.md)
Collectors:
- [Google BigQuery Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-bigquery-source/)
- [GCP Metrics Source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/)
- [Google Cloud Platform (GCP) Source](/docs/send-data/hosted-collectors/google-source/google-cloud-platform-source/)
Community app: [Sumo Logic for GCP Balancer Metrics](https://github.com/SumoLogic/sumologic-content/tree/master/GCP/Load_Balancer_Metrics) |
| | [Google Workspace](https://workspace.google.com/) | App: [Google Workspace](/docs/integrations/google/workspace/install-app-dashboards/)
Automation integrations:
- [Google Alert Center](/docs/platform-services/automation-service/app-central/integrations/google-alert-center/)
- [Google Admin](/docs/platform-services/automation-service/app-central/integrations/google-admin/)
- [Google Drive](/docs/platform-services/automation-service/app-central/integrations/google-drive/)
Collector: [Google Workspace AlertCenter Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-workspace-alertcenter/)
- [Google Workspace Apps Audit - Cloud SIEM](/docs/cse/ingestion/ingestion-sources-for-cloud-siem/google-workspace-apps-audit/)
- [Google Workspace Apps Audit Source](/docs/send-data/hosted-collectors/google-source/google-workspace-apps-audit-source/)
- [Google Workspace User Inventory Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/google-workspace-source/)
- [G Suite Alert Center - Cloud SIEM](/docs/cse/ingestion/ingestion-sources-for-cloud-siem/g-suite-alert-center/) |
| | [Grafana](https://grafana.com/) | Webhook: [Grafana OnCall](/docs/integrations/webhooks/grafana-oncall/) |
| | [Gremlin](https://www.gremlin.com/) | Webhook: [Gremlin](/docs/integrations/webhooks/gremlin/) |
diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md
index 5da96af44e..02f6f13390 100644
--- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md
+++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md
@@ -337,12 +337,6 @@ In this section, we'll introduce the following concepts:
Collects audit reporting events from the LastPass platform.