Dropzone AI Documentation
WebsiteTest Drive
  • Dropzone Documentation
  • Overview
    • Alert Sources
    • Data Sources
    • Communicators
    • On-prem Support - Dropzone Connector
    • Interactive Chat
    • Metrics Guide
  • Dropzone Administraton
    • Team Admin
      • Google Workspace SAML
      • Okta SAML
  • Dropzone Integrations
    • Alert + Data Source Integrations
      • Amazon Web Services (AWS)
        • Cross-Account Access via CloudFormation
        • Cross-Account Access via Console
      • CrowdStrike
      • Datadog
      • Elasticsearch
      • Google Workspace
      • Google GCP
      • Jira
      • Microsoft 365 / Microsoft Defender
      • Palo Alto Networks Firewall
      • Panther
      • SentinelOne
      • Splunk
      • Sumo Logic
    • Alert Integrations
      • Gem
    • Communicators
      • Slack Communicator
    • Data Source Integrations
      • AbuseIPDB
      • Active Directory (LDAP)
      • Archive Inspector
      • Blocklist.de
      • CAPA
      • Censys
      • Crowdstrike Falcon Intelligence
      • DNSResolver
      • File
      • GreyNoise
      • Hybrid Analysis
      • Host.io
      • IPInfo.io
      • IPQualityScore
      • MalwareBazaar
      • Nuclei
      • NVD
      • Okta
      • oletools
      • OpenSSL Sign Code
      • PDF Analysis
      • Perplexity AI
      • PhishTank
      • Shodan
      • TShark
      • QRadar
      • UnshortenMe
      • URLhaus
      • Urlscan.io
      • VirusTotal
      • Vision
      • WHOIS
      • YARAify
Powered by GitBook
On this page
  • Create an API Key
  • Enable the Dropzone Data Source Integration
  • Enable the Dropzone Alert Source Integration

Was this helpful?

  1. Dropzone Integrations
  2. Alert + Data Source Integrations

Jira

PreviousGoogle GCPNextMicrosoft 365 / Microsoft Defender

Last updated 2 months ago

Was this helpful?

This is a combined document for enabling the Jira Dropzone Data Source and Alert Source integrations.

The Dropzone platform supports Jira, a project management and issue tracking tool from Atlassian.

Dropzone's integration is only with the Jira Cloud, however support for on-prem Jira Datacenter is on the roadmap.

Create an API Key

Jira requires an API to enable. The API key is associated with an account so you may wish to create a dedicated service user rather than using your own.

To obtain an API Key, do the following:

  • Log into your Jira account e.g. https://mycompany.atlassian.net as the API user for Dropzone AI

  • Click on your user icon and click "Manage Account"

  • Navigate to "Security" in the top banner

  • Under the header "API tokens", click on "Create and manage API tokens"

  • Click on "Create API token"

  • Enter a name to identify the API key, such as dropzone.ai, then click "Create"

  • Copy the API Token shown for use later in the Dropzone UI where it is called "API Token"

Enable the Dropzone Data Source Integration

The Data source integration allows Dropzone AI to interact with your Jira environment to learn about your specific environment through information found in Jira tickets as part of performing investigations.

You'll need the following information:

Dropzone Field
Source

Server

The same as your company server url in Jira, eg mycompany.atlassian.net

Username

The username of the account that created the API

API Token

The API token value you generated earlier

To enable the Data Source integration, do the following:

  • Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.ai

  • Click System > Integrations

  • Click "Available"

  • In the Search bar, search Jira, then click "Configure"

  • Under the Data Source heading, input the Server, Username, and API Token

  • Click "Test & Save" to finish

If you have any errors engage your Dropzone AI support representative.

Enable the Dropzone Alert Source Integration

The Data source integration allows Dropzone AI to interact with your Jira environment to retrieve alerts that were created inside Jira.

You'll need the following information:

Dropzone Field
Source

Server

The same as your company server url in Jira, eg mycompany.atlassian.net

Username

The username of the account that created the API

API Token

The API token value you generated earlier

To enable the Alert Source integration, do the following:

  • Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.ai

  • Click System > Integrations

  • Click "Available"

  • In the Search bar, search Jira, then click "Configure"

  • Under the Alert Source heading, input the Server, Username, and API Token

  • Under "Ticket alert workflow" select an option from the "Alert Extraction Strategy"

    • ask your Dropzone support representative if you do not know which to use

  • Input your desired Poll interval and lookback

  • Click "Test & Save" to finish

If you have any errors engage your Dropzone AI support representative.

Under "Issue Scan Filter", you may input a Jira query string to filter which issues may be scanned

Under "Jira Issue Filter", you must input a Jira search query to identify Jira tickets that contain alerts to investigate

JQL
JQL
Go to "Manage Account"
Navigate to "Security"
Click on "Create and manage API tokens"
Create API token
Create API token
Copy API token
Integrations Dropdown
Click Available
The Jira Tile
Fill out the Data Source details
Integrations Dropdown
Click Available
The Jira Tile
Fill out the Alert Source details (pt 1)
Fill out the Alert Source details (pt 2)