SOAR Integration Overview: Chronicle SOAR (Siemplify)
Install From MarketPlace
To install the GreyNoise Integration within Siemplify, navigate to the Siemplify Marketplace, search for GreyNoise
then select Install from the Integration Information window.
![Screen Shot 2021-02-24 at 3.27.07 PM.png 1196](https://files.readme.io/3d6a88e-Screen_Shot_2021-02-24_at_3.27.07_PM.png)
Searching for GreyNoise in Siemplify Marketplace
Configure an Instance of the GreyNoise Integration
To begin using the GreyNoise integration, browse to Integrations -> Select the Environment -> Then Click the + and choose GreyNoise to add it.
![Screen Shot 2021-02-24 at 3.30.20 PM.png 443](https://files.readme.io/301382e-Screen_Shot_2021-02-24_at_3.30.20_PM.png)
Adding a new Instance of GreyNoise to Siemplify
Once the Integration Instance is added, select the Gear Icon to modify the parameter for the integration and enter a GreyNoise API Key. Use the Test button to confirm the integration setup is working.
![Screen Shot 2021-02-24 at 3.30.37 PM.png 476](https://files.readme.io/77b5d6c-Screen_Shot_2021-02-24_at_3.30.37_PM.png)
Adding the GreyNoise API key and testing
Performing an On-Demand IP Lookup
From a Case, using the Manual Action button, select GreyNoise from the installed integrations, then select which Lookup to perform.
Choose the Instance, Alert and Entities settings, then Execute the Lookup:
![Screen Shot 2021-02-24 at 3.34.15 PM.png 941](https://files.readme.io/907733e-Screen_Shot_2021-02-24_at_3.34.15_PM.png)
GreyNoise Manual Action Fire - Context Lookup
To see the results, check the Case Wall for details:
Navigate to the Playground War Room to see the results of the lookup:
![Screen Shot 2021-02-24 at 3.37.08 PM.png 735](https://files.readme.io/2d44de0-Screen_Shot_2021-02-24_at_3.37.08_PM.png)
GreyNoise Quick Lookup Result
Also, look for Entity Insights that Provide overview details based on the Lookup Performed:
![Screen Shot 2021-02-18 at 12.24.58 PM.png 668](https://files.readme.io/52d60ce-Screen_Shot_2021-02-18_at_12.24.58_PM.png)
GreyNoise Entity Insight from Context Lookup
![Screen Shot 2021-02-18 at 12.24.50 PM.png 668](https://files.readme.io/1b1b920-Screen_Shot_2021-02-18_at_12.24.50_PM.png)
GreyNoise Entity Insight from RIOT Lookup
Playbooks
GreyNoise Actions can also be added to any playbook and used to provide context and modify a case, based on desired workflow and results of the lookup.
![Screen Shot 2021-02-24 at 3.41.31 PM.png 872](https://files.readme.io/bd7755b-Screen_Shot_2021-02-24_at_3.41.31_PM.png)
Updated 10 months ago