Endpoint Detection and Response
      Back to home
      1. Knowledge Base
      2. Integrations
      3. Endpoint Detection and Response

      ThreatLocker

      How to connect ThreatLocker to Cork

      • You will need to contact ThreatLocker support to obtain an API key
      • Locate your ThreatLocker instance:
        • In your ThreatLocker portal under the “Help” button on the top right written next to the “ThreatLocker Access” text in parentheses.
        • This may be a single letter like B, C, G, etc
      • After ThreatLocker has given you your API key, use the one labelled "Reports" to connect to Cork.
      • After connecting, if you only get tenants back, but no endpoints, please reach out to ThreatLocker to make sure the API key you requested is valid for all child organizations