Vectra XDR (v1.3.3)
Vectra XDR pack empowers the SOC to create incidents using Vectra AI's Attack Signal Intelligence.
- Author
- Vectra AI
- Support
- partner
- URL
- https://support.vectra.ai
- Categories
- Network Security
Incident fields (26)
- Vectra XDR Entity Account Type
- Vectra XDR Entity Assignment Assigned By
- Vectra XDR Entity Assignment Assigned Date
- Vectra XDR Entity Assignment Assigned to
- Vectra XDR Entity Assignment Details
- Vectra XDR Entity Assignment ID
- Vectra XDR Entity Assignment Outcome
- Vectra XDR Entity Assignment Resolved By
- Vectra XDR Entity Assignment Resolved Date
- Vectra XDR Entity Attack Profile
- Vectra XDR Entity Attack Rating
- Vectra XDR Entity Detection Details
- Vectra XDR Entity Filter Tags
- Vectra XDR Entity Host Type
- Vectra XDR Entity ID
- Vectra XDR Entity IP
- Vectra XDR Entity Importance
- Vectra XDR Entity Last Detection Timestamp
- Vectra XDR Entity Last Modification Timestamp
- Vectra XDR Entity Name
- Vectra XDR Entity Notes
- Vectra XDR Entity Priority Status
- Vectra XDR Entity State
- Vectra XDR Entity Type
- Vectra XDR Entity Urgency Score
- Vectra XDR Entity Velocity
Integrations (1)
- Vectra XDR
Layouts (1)
- Vectra XDR Entity
Playbooks (5)
- Add Note - Vectra XDR
- Detections Assessment - Vectra XDR
- Dispatch Incident - Vectra XDR
- MDR Escalation Process - Vectra XDR
- Process Incident - Vectra XDR
Scripts (5)
- VectraXDRAddNotesInLayout
- VectraXDRDisplayEntityDetections
- VectraXDRGenerateMailBody
- VectraXDRSyncEntityAssignment
- VectraXDRSyncEntityDetections
README
Vectra XDR pack allows the security operations center to create incidents based on prioritized Entities, powered by Vectra AI’s Attack Signal Intelligence. This pack enables security teams to synchronize the Vectra XDR Entities with Cortex XSOAR incidents in real time, making it feasible to manage operations from a single place.
What does this pack do?
- Fetch entities and their detections from Vectra XDR.
- List and Describe Entities and Detections.
- List, Create, Update, and Resolve Entity Assignments.
- List Assignment Outcomes.
- List, Create, Update, and Delete Entity notes.
- List, Update, and Remove Entity tags.
- List, Assign, and Unassign members in Group.
- Mark and Unmark Entity’s detections as fixed.
- Download PCAP of detection.
Support
If you have questions or concerns about the content you’re receiving, please reach out for support at https://support.vectra.ai or support@vectra.ai.
For more information, visit our Cortex XSOAR Developer Docs