IronNet (v1.1.39)

The IronDefense Integration allows users to interact with IronDefense alerts within Demisto. The Integration provides the ability to rate alerts, update alert statuses, add comments to alerts, and to report observed bad activity.

Author: Iron Defense
Support: partner
URL: https://ironnet.atlassian.net/servicedesk/customer/portal/4
Categories: Network Security

Incident fields (47)

IronDefense Aggregation Criteria
IronDefense Alert ID
IronDefense Alert IDs
IronDefense Analyst Expectation
IronDefense Analyst Severity
IronDefense App Domains
IronDefense Bytes In
IronDefense Bytes Out
IronDefense Category
IronDefense Comment Details
IronDefense Confidence
IronDefense Created
IronDefense Dome Shared Time
IronDefense Dome Tags
IronDefense Dst Entity Attribute
IronDefense Dst Entity Attribute Type
IronDefense Dst IP
IronDefense Dst Network ID
IronDefense Dst Port
IronDefense End Time
IronDefense Event Count
IronDefense Event ID
IronDefense First Event Created
IronDefense High Cognitive System Details
IronDefense IronDome Category
IronDefense IronDome ID
IronDefense Is Blacklisted
IronDefense Is Whitelisted
IronDefense Last event Created
IronDefense Mismatch Details
IronDefense Primary App Protocol
IronDefense Raw Data Format
IronDefense Secondary App Protocol
IronDefense Severity
IronDefense Severity Details
IronDefense Severity Malicious Details
IronDefense Severity Suspicious Details
IronDefense Src Entity Attribute
IronDefense Src Entity Attribute Type
IronDefense Src IP
IronDefense Src Network ID
IronDefense Start Time
IronDefense Status
IronDefense SubCategory
IronDefense Total Bytes
IronDefense Updated
IronDefense VUE URL

Integrations (1)

IronDefense

Layout rules (3)

IronDefense Alert Notification Layout Rule
IronDefense Event Notification Layout Rule
IronDome Notification Layout Rule

Layouts (3)

IronDefense Alert Notification
IronDefense Event Notification
IronDefense IronDome Notification