Orca (v3.1.1)
Integrate with Orca security for bidirectional incident management and fetching of asset information.
- Author
- Orca Security
- Support
- partner
- URL
- https://orca.security/
- Default data source
- Orca Event Collector
- Categories
- Cloud Security
Incident fields (4)
- Orca Alert ID
- Orca Asset Unique ID
- Orca Cloud Account
- Orca Reason
Integrations (2)
- Orca
- Orca Event Collector
Modeling rules (1)
- Orca Modeling Rules
README
The Orca Security Technology Cortex content pack combines the deep and contextual alert findings of Orca with the Cortex XSOAR analytic capabilities.
Use this technology Content Pack to prioritize critical vulnerabilities that exist across your cloud estate and create data-driven outcomes.
What does this pack do?
- Imports Orca alerts regarding vulnerabilities, malware, misconfigurations, lateral movement risk, authentication risk, and insecure high-risk data.
- Provides for investigative opportunities through correlation, visualization, and historical review to deliver advanced security reporting and situational awareness.
- Provides real time threat detection; alerts from Orca are pushed in real time.
For more information, visit Orca Security