Security integrations
- Latest Dynatrace
- Overview
Dynatrace provides different ways to integrate external security data from multiple third-party products into Grail and operationalize your data on the Dynatrace platform.
Ingest data
For a better understanding of the integration types, see OpenPipeline integration types for security events.
See below for the supported integrations (with instructions).
-
Ingest Amazon ECR container vulnerability findings and scan events
-
Ingest GitHub Advanced Security security events and audit logs
-
Ingest Qualys vulnerability findings, scan events, and audit logs
-
Ingest SonarQube security and quality events, metrics, and audit logs
-
Ingest Tenable vulnerability findings, scan events, and audit logs
Enrich data
Add external threat‑intelligence context to observables using 
Security Enrichment.
You can connect HTTP‑based threat‑intelligence sources—such as AbuseIPDB, VirusTotal, or any custom API—and enrich observables like IP addresses with reputation, geolocation, or vendor‑specific metadata.
After configuring enrichment connections in Security Enrichment, you can apply enrichment to:
- Validate observables in
Investigations - Enhance detection findings in
Threats & Exploits - Use enrichment actions in
Workflows