Trellix Email Security - Cloud v2.1.5

Trellix Email Security - Cloud (Formerly FireEye ETP) is a cloud-based platform that protects against advanced email attacks.

Author:
Cortex XSOAR
Support:
xsoar
URL:
https://www.paloaltonetworks.com/cortex
Default data source:
FireEye ETP Event Collector
agentixxsiam
Network Security

Classifiers (2)

Incident types (1)

Integrations (2)

Modeling rules (1)

Playbooks (1)

README

The Trellix Email Security - Cloud integration with Cortex XSOAR streamlines the endpoint security investigation process within an organization and facilitates threat hunting efforts.

What does this pack do?

  • Retrieve specific messages from the Trellix Email Security - Cloud portal.
  • Conduct and perform threat hunting easily and effectively by utilizing the pack playbook or the fireeye-etp-search-messages command.
  • Analyze and investigate Trellix Email Security - Cloud alerts.
  • Receive a summary of Trellix Email Security - Cloud alerts.