AWS - Security Hub (v2.0.2)
Amazon Web Services Security Hub Service.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Default data source
- AWS Security Hub Event Collector
- Categories
- Cloud Service Provider, Cloud Security
Incident fields (26)
- AWS Security Hub Action
- AWS Security Hub Company Name
- AWS Security Hub Compliance
- AWS Security Hub Confidence
- AWS Security Hub Criticality
- AWS Security Hub Generator Id
- AWS Security Hub Malware
- AWS Security Hub Network Path
- AWS Security Hub Product Arn
- AWS Security Hub Product Fields
- AWS Security Hub Product Name
- AWS Security Hub Provider Fields
- AWS Security Hub Provider Updated At
- AWS Security Hub Record State
- AWS Security Hub Related Findings
- AWS Security Hub Remediation
- AWS Security Hub Resources
- AWS Security Hub Schema Version
- AWS Security Hub Severity
- AWS Security Hub Threat Intel Indicators
- AWS Security Hub Threats
- AWS Security Hub Types
- AWS Security Hub User Defined Fields
- AWS Security Hub Verification State
- AWS Security Hub Vulnerabilities
- AWS Security Hub Workflow Status
Integrations (3)
- AWS - Security Hub
- AWS - Security Hub v2
- AWS Security Hub Event Collector
Layouts (1)
- AWS Security Hub Finding
Modeling rules (1)
- AWS Security Hub Modeling Rule
README
AWS Security Hub is a service that performs security best practice checks, aggregates alerts, and enables automated remediation. The service helps you analyze security trends in your environment, and helps you identify the highest priority security issues. It provides you with a comprehensive view of the security state of your AWS environment and resources, along with the compliance status of your environment, based on CIS AWS Foundations compliance checks. AWS Security Hub collects security data from AWS accounts, services, and integrated third-party products.
What does this pack do?
This pack enables you to:
- Disable Security Hub for the current region.
- Update finding fields and objects in order to refresh the information required for investigating a Security Hub finding.
- Enable Security Hub for your account in the current region or the region you specify in the request, and the CIS AWS Foundations standard.
- Return a list of findings that match the specified criteria.
- Provide AWS Security Hub master account details to the current member account.
- List details about all member accounts for the current AWS Security Hub master account.