IronNet v1.1.39
The IronDefense Integration allows users to interact with IronDefense alerts within Demisto. The Integration provides the ability to rate alerts, update alert statuses, add comments to alerts, and to report observed bad activity.
- Author:
- Iron Defense
- Support:
- partner
AgentixXSIAM
Network Security
Incident fields (47)
- IronDefense Aggregation Criteria
- IronDefense Alert ID
- IronDefense Alert IDs
- IronDefense Analyst Expectation
- IronDefense Analyst Severity
- IronDefense App Domains
- IronDefense Bytes In
- IronDefense Bytes Out
- IronDefense Category
- IronDefense Comment Details
- IronDefense Confidence
- IronDefense Created
- IronDefense Dome Shared Time
- IronDefense Dome Tags
- IronDefense Dst Entity Attribute
- IronDefense Dst Entity Attribute Type
- IronDefense Dst IP
- IronDefense Dst Network ID
- IronDefense Dst Port
- IronDefense End Time
- IronDefense Event Count
- IronDefense Event ID
- IronDefense First Event Created
- IronDefense High Cognitive System Details
- IronDefense IronDome Category
- IronDefense IronDome ID
- IronDefense Is Blacklisted
- IronDefense Is Whitelisted
- IronDefense Last event Created
- IronDefense Mismatch Details
- IronDefense Primary App Protocol
- IronDefense Raw Data Format
- IronDefense Secondary App Protocol
- IronDefense Severity
- IronDefense Severity Details
- IronDefense Severity Malicious Details
- IronDefense Severity Suspicious Details
- IronDefense Src Entity Attribute
- IronDefense Src Entity Attribute Type
- IronDefense Src IP
- IronDefense Src Network ID
- IronDefense Start Time
- IronDefense Status
- IronDefense SubCategory
- IronDefense Total Bytes
- IronDefense Updated
- IronDefense VUE URL