FortiSIEM Configuration Guide: Threat Feed Setup and Integration

This FortiSIEM configuration guide describes how to integrate Malware Patrol threat intelligence feeds (DNS-over-HTTPS, malicious domains, malicious IPs, malware hashes, and malware/ransomware URLs) into FortiSIEM: creating feed groups, configuring API update URLs and credentials, mapping CSV fields to FortiSIEM columns, and scheduling hourly updates. The guide is procedural and intended for administrators to ingest external IoC feeds rather than reporting any specific security incident or threat activity.