http://www.bing.com:80/search?q=Integration+Using+PythonSearch resultshttp://www.bing.com:80/s/a/rsslogo.gifhttp://www.bing.com:80/search?q=Integration+Using+PythonCopyright © 2026 Microsoft. All rights reserved. These XML results may not be used, reproduced or transmitted in any manner or for any purpose other than rendering Bing results within an RSS aggregator for your personal, non-commercial use. Any other use of these results requires express written permission from Microsoft Corporation. By accessing this web page or using these results in any manner whatsoever, you agree to be bound by the foregoing restrictions.https://investigator.corelight.com/docs/settings/gpt-settings.htmlGPT integration configuration scenarios ¶ Corelight offers granular control over AI Features, allowing you to balance advanced analytics with your organization’s security and compliance requirements.Mon, 20 Jul 2026 16:01:00 GMThttps://investigator.corelight.com/docs/settings/system-settings.htmlUsers with an Analyst role can see the Integrations page in view-only mode and can see available integrations, their status, and alert exports.Mon, 17 Aug 2026 14:23:00 GMThttps://eu.investigator.corelight.com/docs/settings/service-now-settings.htmlAn integration dialog box appears. Toggle the integration value to Enabled. Enter your ServiceNow credentials, including username, password, and instance name. These values are available in ServiceNow in My Instance > Manage Instance Password. The ServiceNow instance name (or instance ID) is a unique identifier for your ServiceNow instance.Mon, 13 Jul 2026 05:39:00 GMThttps://eu.investigator.corelight.com/docs/settings/alert-catalog.htmlThe Alert Catalog is a list of all alert categories in the system. From the Alert Catalog, you can view details about each alert category, enable or disable alert categories, customize severity scores, and define entities to exclude from a category. The Alert Catalog also highlights detection methods for entries. The catalog is available to both analysts and admins.Wed, 29 Jul 2026 10:35:00 GMThttps://investigator.corelight.com/docs/settings/users/saml-sso-users.htmlConfiguring single sign-on (SSO) in Investigator allows users to log in with their existing company credentials instead of managing separate passwords. This integration uses the Security Assertion Markup Language (SAML) 2.0 standard to delegate authentication to an external Identity Provider (IdP), such as Okta or Auth0.Fri, 14 Aug 2026 12:54:00 GMThttps://investigator.corelight.com/docs/settings/alert-export.htmlSign In with SSO Trouble signing in? Contact SupportFri, 03 Jul 2026 10:52:00 GMThttps://investigator.corelight.com/docs/settings/ms-defender.htmlThe MS Defender integration seamlessly blends Defender EDR with Investigator network detection capabilities and maps Corelight IP addresses from detections to Defender’s host information. When integrated, detections show valuable entity context within the detection details. The expanded data provides additional context to analyze threats and helps analysts make informed decisions during the ...Sun, 09 Aug 2026 08:49:00 GMThttps://investigator.corelight.com/docs/settings/microsoft-entra-id.htmlWith a Microsoft Entra ID integration, you can receive identity enrichment details for Investigator detections. The Microsoft Entra ID integration extends Investigator’s identity capabilities by blending Microsoft Entra ID (formerly Azure Active Directory) identity data with Investigator network detections.Sun, 09 Aug 2026 23:58:00 GMThttps://investigator.corelight.com/docs/settings/sensor.htmlThe Sensor Monitoring page guides you through sensor configuration and provides a health dashboard for connected sensors. You can see how many sensors are exporting data to Investigator and view detailed information about the status and the nature of the exports. The dashboard also provides search and filtering options so you can pinpoint problems with your sensor connections.Fri, 07 Aug 2026 01:13:00 GMThttps://investigator.corelight.com/docs/settings/crowdstrike-identity.htmlThe integration extends existing CrowdStrike EDR capabilities by blending Identity Protection data with Investigator network detections. It correlates Corelight network activity with CrowdStrike’s user information, providing a comprehensive User History and Identity Alerts associated with the host.Wed, 29 Jul 2026 04:59:00 GMThttps://eu.investigator.corelight.com/docs/settings/crowdstrike-edr.htmlThe CrowdStrike integration seamlessly blends CrowdStrike EDR with Investigator network detection capabilities and maps Corelight IP addresses from detections to CrowdStrike’s host information. When integrated, detections show valuable entity context within the detection details. The expanded data provides additional context to analyze threats and helps analysts make informed decisions ...Sun, 19 Jul 2026 12:13:00 GMT