Infoblox IQ for Threat Defense

Enhance your existing Microsoft Teams integration with Infoblox IQ for Threat Defense, which provides richer security context and actionable insights directly within your Microsoft Teams channels.

With Infoblox IQ for Threat Defense, downstream integrations are enriched with:

Richer threat context
Impacted asset and user information
Actionable recommendations
Faster investigation and response

These enhancements help security teams understand risk faster, identify the appropriate response owner, and accelerate remediation—all from the tools they already use.

Required Customer Action

If you are upgrading an existing integration, complete the following steps to enable Infoblox IQ for Threat Defense:

Step 1: Disable and then re-enable the existing traffic flow.
Step 2: Update the traffic flow from SOC Insights → IQ for Threat Defense.

Note: These steps are required for the traffic flow to receive the enhanced event data and capabilities provided by Infoblox IQ for Threat Defense.

The Infoblox IQ for Threat Defense integration with Microsoft Teams delivers seamless, real-time security events and alerts directly to your Microsoft Teams channels. This integration enables security teams to collaborate more effectively, respond to security incidents faster, and improve overall operational efficiency.

With this solution, you can:

Unify threat alerts.
Simplify investigations.
Take decisive action.

Prerequisites

Valid Infoblox API Key
- To generate an API key, refer to Configuring User API Keys .
License entitlements for Data Connector, IQ for Threat Defense, and Ecosystem.
Microsoft Teams Webhook URL.

Infoblox IQ for Threat Defense - Slack