Devo

With the Devo integration, users have the ability to query their Devo instance by writing a query or using a query ID from a previously built query within their Devo instance. While the service app retrieves the executed search query on a set schedule returning hits that match the query.

The following action is available:

• Run Query: Query your Devo instance by writing a query or using a query ID from a previously built query.

This app can be found in the Dataminr App Catalog under the name: Devo

The Investigation Insights – Devo integration searches across Devo’s SIEM technology for information related to different indicators. The searches can be specified by users or Investigation Insights Admins to help provide the best context available. Enabling analysts to get the most out of their Devo SIEM.