RocketCyber

The Dropzone platform integrates with RocketCyber, a cloud-based MDR and SOC platform designed to detect and respond to malicious activity that bypasses traditional defenses.

Create an API Key

RocketCyber requires an API key to enable.

To obtain an API Key, do the following:

• In the upper right of your RocketCyber homepage, click on the building icon

• Click "Provider Settings"

• Navigate to "RocketCyber API"

• Copy the Access Token shown for use later in the Dropzone UI where it is called "API Key"

• Alternatively, generate a new API key by clicking "Generate Key"

Enable QRadar

To enable the Alert Source integration, you will need the following information:

Dropzone Field	Source
API Key	The Acccess Token value you copied earlier
API Hostname	The hostname of the RocketCyber API, e.g. api-us.rocketcyber.com

• Navigate to your Dropzone AI tenant home page e.g. https://mycompany.dropzone.ai

• In the bottom left hand corner, navigate to Settings > Integrations

• Click "Available"

• In the Search bar, search RocketCyber, then click "Configure"

• Input the API Key and Hostname

• Input your desired poll interval and lookback

• Click "Test & Save" to finish