# GreyNoise

## Service Overview

GreyNoise is a cyber intelligence and defense service designed to help organizations gain a better understanding of the Internet threat landscape and strengthen their security posture. Leveraging an extensive database of digital noise, GreyNoise identifies and differentiates harmless activities from genuine threats, enabling security teams to focus on real risks.

## Key Features

1. **Digital Noise Identification:** GreyNoise continuously collects and analyzes data from various Internet sources to determine IP addresses and known actors generating "digital noise." This digital noise includes mundane activities, vulnerability scans, and other non-malicious behaviors.
2. **Known Threat Filtering:** By excluding IP addresses associated with digital noise activities, GreyNoise reduces the number of false positives in security alerts, allowing analysts to concentrate on potentially dangerous activities.
3. **Integration with Security Tools:** GreyNoise seamlessly integrates with existing security tools such as Security Information and Event Management (SIEM) systems and threat intelligence platforms, enhancing threat detection and incident response times.
4. **Data Visualization:** The GreyNoise service offers a user-friendly visual interface that allows security analysts to map and analyze digital noise trends over a given period, facilitating an understanding of behavioral patterns.
5. **Integration API:** GreyNoise provides a robust API that enables businesses to automate queries to the GreyNoise database and integrate data into their own custom tools and systems.

## Key Benefits

- **Reduced False Positive Alerts:** By distinguishing harmless activities from real threats, GreyNoise allows security teams to focus on what truly matters, reducing time and effort spent on false or non-critical alerts.
- **Improved Threat Detection:** By identifying known actors of digital noise, GreyNoise provides additional insights into malicious activities, enhancing the detection of new and emerging threats.
- **Optimized Resource Allocation:** With a better understanding of threats, security teams can allocate resources effectively to better protect their organization.

GreyNoise is a vital tool for enterprises seeking to bolster their resilience against cyber threats and make informed decisions in cybersecurity.

## Getting started with GreyNoise

1. Go to the **`MY API KEY`** page

   <div class="docs-screenshot-compact">

   ![Go my api key page](./assets/go-my-api-key-page.png)

   </div>

2. Click on **`VIEW API KEY`** button and copy the API key

   <div class="docs-screenshot-compact">

   ![Click view api key button copy](./assets/click-view-api-key-button-copy.png)

   </div>

3. Go to the **`VAULT`** page and click on the **`CREATE A CREDENTIAL`** button.

   <div class="docs-screenshot-compact">

   ![Go vault page click create credential](./assets/go-vault-page-click-create-credential.png)

   </div>

4. Search for Greynoise in the search bar and select GreyNoise (Vendor)

   <div class="docs-screenshot-compact">

   ![Search greynoise search bar select greynoise](./assets/search-greynoise-search-bar-select-greynoise.png)

   </div>

5. Select **`HTTP API Key`** type

   <div class="docs-screenshot-compact">

   ![Select http api key type](./assets/select-http-api-key-type.png)

   </div>

6. **`Key`** field must contain key and **`Value`** field must contain API Key

   <div class="docs-screenshot-compact">

   ![Getting started greynoise key](./assets/getting-started-greynoise-key.png)

   </div>

7. To create a flow, click on the **`+`** button and click on the chevron icon in the integration category.

   <div class="docs-screenshot-compact">

   ![Create flow click button click chevron](./assets/create-flow-click-button-click-chevron.png)

   </div>

8. Search for Greynoise in the search bar, click on the first result and add the integration by clicking on the **`+`** icon.

   <div class="docs-screenshot-compact">

   ![Search greynoise search bar click first](./assets/search-greynoise-search-bar-click-first.png)

   </div>

9. Return to your flow, click on the **`+`** and search for greynoise in the search bar. Then select an action

   <div class="docs-screenshot-compact">

   ![Return your flow click search greynoise](./assets/return-your-flow-click-search-greynoise.png)

   </div>

10. Fill in the mandatory fields in the input section

   <div class="docs-screenshot-compact">

   ![Fill mandatory fields input section](./assets/fill-mandatory-fields-input-section.png)

   </div>

1. Select the desired server in the **`Server`** field

   <div class="docs-screenshot-compact">

   ![Select desired server server field](./assets/select-desired-server-server-field.png)

   </div>

1. Click on the flow run button at top left

   <div class="docs-screenshot-compact">

   ![Click flow run button top left](./assets/click-flow-run-button-top-left.png)

   </div>

1. Congratulations on deploying your first flow with GreyNoise 🎉

   <div class="docs-screenshot-compact">

   ![Congratulations deploying your first flow](./assets/congratulations-deploying-your-first-flow.png)

   </div>