Merge pull request #1501 from TOUFIKIzakarya/add/splunk_soar

Add splunk soar doc

_shared_content/intelligence_center/integrations/splunk_soar.md

@@ -0,0 +1,50 @@
+# External Integrations: Splunk SOAR
+
+## Description
+
+An App for Splunk SOAR is available to interact with our SEKOIA.IO API.
+
+For the moment there are just three actions for the SEKOIA CTI API :
+
+- **Get indicator** : Action that allow the user to get an indicator according to some criteria.
+- **Get indicator Context**: Action that allow the user to get the context of an indicator.
+- **Get Observable**: Create an action that allow the user to get an observable according to some criteria
+
+## Prerequisite
+
+On Sekoia.io CTI, create an API KEY with the following permission:
+- `INTHREAT_READ_OBJECTS` (`8d9901dc-0508-4472-b3c1-5ad5efc96032`): Read objects from InThreat
+
+[More information on API KEY creation](../../../getting_started/manage_api_keys.md)
+
+## Install
+
+In your Splunk SOAR instance, you can directly go to the `app` part and search for `sekoia` in the `unconfigured apps`. 
+
+In the case, you can't find it, Follow this steps bellow : 
+
+1/ Search for it in the [splunk marketplace](https://splunkbase.splunk.com/app/7142)
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_1.png)
+
+2/ Download the app as tar file
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_6.png)
+
+3/ Go to the `app` part in your instance
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_2.png)
+
+4/ click on `install app` button
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_3.png)
+
+5/ Put the tar file there.
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_4.png)
+
+6/ finally you can start using it.
+
+![!View of Sekoia.io integration in Splunbase](splunk_soar_images/image_5.png)
+
+To learn how to use the integration, please read the [technical documentation ](https://github.com/splunk-soar-connectors/sekoiaio/blob/next/README.md)

mkdocs.yml

@@ -381,6 +381,7 @@ nav:
       - Microsoft Sentinel: cti/features/integrations/microsoft-sentinel.md
       - OpenCTI: cti/features/integrations/opencti.md
       - Splunk: cti/features/integrations/splunk.md
+      - Splunk SOAR: cti/features/integrations/splunk_soar.md
       - Anomali ThreatStream: cti/features/integrations/anomali.md
       - PaloAlto Cortex XSOAR: cti/features/integrations/paloalto_xsoar.md
   - Develop: