Skip to content

Commit ffc8c90

Browse files
authored
docs(connectors): add Intruder connector reference (#15285)
Document the new Intruder.io connector on the Pro connectors reference: it uses the Intruder REST API (Bearer access token) to pull the whole account's posture — targets -> issues -> occurrences — mapping each target to a Product and each occurrence to a Finding. Add it to the tool reference and the supported-connectors list. Story: sc-13768
1 parent cac35fe commit ffc8c90

2 files changed

Lines changed: 14 additions & 0 deletions

File tree

docs/content/import_data/pro/connectors/about_connectors.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ We currently support Connectors for the following tools, with more on the way:
3434
* **Checkmarx ONE**
3535
* **Dependency-Track**
3636
* **Group-IB ASM**
37+
* **Intruder** (cloud vulnerability scanner: pulls targets, issues, and occurrences)
3738
* **IriusRisk**
3839
* **JFrog Xray**
3940
* **Kubescape** (Kubernetes posture: reads the Kubescape operator's in-cluster results)

docs/content/import_data/pro/connectors/connectors_tool_reference.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -568,6 +568,19 @@ DefectDojo creates a separate Record for each domain you have verified with HIBP
568568

569569
See the [Have I Been Pwned API documentation](https://haveibeenpwned.com/API/v3) for more information.
570570

571+
## **Intruder**
572+
573+
The Intruder connector uses the [Intruder REST API](https://developers.intruder.io/) to pull your whole account's posture into DefectDojo. Each Intruder **target** is discovered as a Record (Product); each **occurrence** of an issue on a target becomes a Finding.
574+
575+
#### Connector Mappings
576+
577+
1. Leave the **Location** field as `https://api.intruder.io/` (the default Intruder API server).
578+
2. Enter an Intruder **API access token** in the **Secret** field.
579+
580+
Generate an access token in Intruder under **My account > API Access Tokens** (you'll need your account password to create it, and the token is shown only once). See the [Intruder API documentation](https://developers.intruder.io/docs/creating-an-access-token) for details.
581+
582+
Findings are derived per occurrence: severity comes from the issue severity, CVEs and CVSS from the occurrence, the location from the target/port, and a snoozed occurrence is imported as an inactive (false-positive or risk-accepted) finding.
583+
571584
## **IriusRisk**
572585

573586
The IriusRisk connector uses an API token to pull threat modeling data from your IriusRisk instance.

0 commit comments

Comments
 (0)