TaegisXDR Deprecated

Deprecated. Use TaegisXDR v2 instead.

Data Enrichment & Threat Intelligence · Secureworks

Configuration parameters

  • environment — Taegis Environment (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • client_id — Client ID (required)
  • client_secret — Client Secret (required)
  • isFetch — Fetch incidents
  • max_fetch — Maximum number of incidents per fetch
  • first_fetch — First fetch time interval
  • incidentFetchInterval — Incidents Fetch Interval
  • incidentType — Incident type
  • include_assets — Include Assets in Fetch

Commands (18)

  • taegis-archive-investigation

    Archive an investigation

  • taegis-create-comment

    Create a comment on an investigation

  • taegis-create-investigation

    Create an Investigation within Taegis

  • taegis-execute-playbook

    Executes a Taegis playbook instance

  • taegis-fetch-alerts

    List Taegis alerts by ID

  • taegis-fetch-assets

    Fetch assets based on search criteria

  • taegis-fetch-comment

    Fetch comment by comment ID

  • taegis-fetch-comments

    Fetch comments by Parent Type and ID

  • taegis-fetch-endpoint

    Fetch endpoint information

  • taegis-fetch-investigation

    Fetch all investigations or a specific investigation

  • taegis-fetch-investigation-alerts

    Fetch Alert IDs related to a specific investigation

  • taegis-fetch-playbook-execution

    Fetch the results of a Taegis playbook instance execution

  • taegis-fetch-users

    Fetch a user by ID or email address

  • taegis-isolate-asset

    Isolate a specific asset

  • taegis-unarchive-investigation

    Unarchive an investigation

  • taegis-update-alert-status

    Update the status of an alert

  • taegis-update-comment

    Update an existing comment

  • taegis-update-investigation

    Update an existing investigation