Validin Beta Webhooks Deliver Real-Time YARA and Threat-Profile Events
Summary
Validin’s beta webhooks notify Enterprise users of YARA matches and new threat-profile indicators or references. Users can select payload fields, verify HMAC SHA256 signatures, test delivery, and integrate notifications with Slack.
Key points
- The beta feature is available to Validin Enterprise customers.
- Webhook events cover YARA rule matches in Projects and newly observed indicators or references in Threat Profiles.
- Users receive a signing secret; Validin signs outbound requests with HMAC SHA256 so recipients can verify them.
- Users can choose monitored Projects or Threat Profiles, customize payload fields, and test delivery before going live.
- The article demonstrates routing webhook notifications into Slack workflows.
Article Details
- Event Type
- Beta launch of Validin Webhooks for enterprise users.
- Impact
- Enables real-time notifications of YARA rule matches and new indicators or references on threat profiles. Users can route signed webhook payloads to Slack or other endpoints and automate threat-hunting workflows.
Vendors
SlackUsers can configure endpoints (including Slack) to receive HMAC SHA256-signed payloads, customize event fields, test deliveries, and build automated workflows.ValidinValidin has launched Webhooks in Beta for Enterprise users to enable real-time event ingestion for YARA rule matches and additions to threat profiles.
Products
SlackUsers can configure endpoints (including Slack) to receive HMAC SHA256-signed payloads, customize event fields, test deliveries, and build automated workflows.ValidinValidin has launched Webhooks in Beta for Enterprise users to enable real-time event ingestion for YARA rule matches and additions to threat profiles.WebhooksValidin has launched Webhooks in Beta for Enterprise users to enable real-time event ingestion for YARA rule matches and additions to threat profiles.