KnowBe4 Security Awareness Training (KSAT) Console
Cortex XSOAR is a comprehensive security orchestration, automation, and response (SOAR) platform that unifies case management, automation, real-time collaboration, and threat intel management to serve security teams across the incident lifecycle. Cortex XSIAM is a Service Integration and Management (SIAM) platform that combines data from endpoints, network, cloud, and identity systems, so machine learning models can process and understand how the data connects.
This “KnowBe4 KSAT Event Collector” content pack contains the KSAT integration, which sends your users' KnowBe4 Security Awareness Training (KSAT) and simulated phishing data directly to Cortex XSOAR and Cortex XSIAM.
What does this pack do?
This pack streamlines your security processes by using KSAT user and event data in automation, playbooks, and reports. For more details, see the list below:
- Pull KSAT data into Cortex XSOAR and Cortex XSIAM.
- Pull Risk Score history for your account, groups, and users.
- Pull all Phishing Security Test (PST) results for your account and for specific campaigns.
- Pull the statuses of your training campaigns.
- Pull a list of your users’ training campaign enrollments.
- Pull your users’ event data.
- Add events to User Timelines in KSAT.
- Delete events from User Timelines in KSAT.
For KnowBe4 subscription levels and pricing, see the KnowBe4 Security Awareness Training pricing page.
For more information, see KnowBe4’s How to Integrate Cortex XSOAR with Your KSAT Console article.

