Open integration framework for cybersecurity incident management software platform

摘要

In an open integration framework of a computerized cybersecurity incident management software platform, integrations are defined at an action level for integrating cybersecurity products for performing desired actions into the cybersecurity incident management software platform. High-level parameters of an integration are defined through an integration definition file. The integration definition file identifies a cybersecurity product to be called through an application program interface. One or more actions of the integration are defined through one or more respective action definition files that define details of the one or more actions. The action definition files identify the integration defined by the integration definition file, and the actions requiring use of the cybersecurity product through the application program interface.