Data and context sources connectors

Use these connectors to retrieve additional data from third-party tools for your Elastic Security and agentic workflows.

Third-party search

• Brave Search: Search the web using the Brave Search API.
• Notion: Explore content and databases in Notion.

Threat intelligence

• AbuseIPDB: Check IP reputation and report abusive IPs.
• AlienVault OTX: Retrieve community-driven threat intelligence.
• GreyNoise: Detect and classify Internet scanning noise.
• Shodan: Perform Internet-wide asset discovery and vulnerability scanning.
• URLVoid: Check domain and URL reputation using multi-engine scanning.
• VirusTotal: Perform file scanning, URL analysis, and threat intelligence lookups.