Prerequisites
Your organization should be integrated with Abnormal Security and enabled for real-time detection of malicious emails
Integration steps
Click on Abnormal REST API
Retrieve your authentication token, copy it and set aside.
Note: Keep the token safe, as it grants access to sensitive threat data related to your organization. Store it in a secure place, such as an encrypted password vault, and do not share it unless absolutely necessary. If you feel that the token has been compromised, please contact your Abnormal Security Account Manager immediately.
Allowlist Reco's IP addresses. To do so, please go to Abnormal portal and enter the following IP addresses:
63.34.247.11
54.155.92.84
46.137.71.241
34.238.227.56
54.165.205.157
3.221.91.232
Fill in the API Token field with the value copied in the previous step
If your company is based in the European Union, please check the Based in EU checkbox
Click on "Connect" to finish connection process