Vectra v2

Deprecated. Use Vectra Detect instead.

Category

Network Security

Pack

Vectra

Configuration parameters

• server — Server URL (e.g., https://192.168.0.1) (required)
• token — API Token (required)
• first_fetch_time — First fetch time range (<number> <time unit>, e.g., 1 hour, 30 minutes)
• c_score_gte — Fetch only Detections with greater/equal Certainty score
• t_score_gte — Fetch Detections with a threat score greater than or equal to
• state — Fetch only Detections with matching State
• fetch_size — The number of results returned in each fetch
• isFetch — Fetch incidents
• insecure — Trust any certificate (not secure)
• incidentType — Incident type
• proxy — Use system proxy settings

Commands (9)

• vectra-get-detection-by-id — Returns detections by detection ID.
• vectra-get-detections — Returns a list of detection objects, which contain all the information related to security events detected on the network.
• vectra-get-host-by-id — Returns a host by ID.
• vectra-get-hosts — Returns host information, which includes data that correlates the host data to detected security events.
• vectra-get-proxies — Retrieves the current list of proxy IP addresses, or single proxy IP address by proxy ID.
• vectra-get-threatfeed — Retrieves the current list of all ThreatFeeds, or single ThreatFeed by ThreatFeed ID.
• vectra-get-users — Retrieves the current list of Users.
• vectra-search — Runs an advanced search on hosts and detections.
• vectra-triage — The rules branch can be used to retrieve a listing of configured Triage rules.