Symantec Endpoint Detection and Response v1.0.11
Symantec EDR On-prem helps to detect threats on your network by filtering endpoints data to find Indicators of Compromise (IoCs) and take actions to remediate the threat(s) contain suspicious events, isolate potentially compromised devices, and delete malicious files and associated artifacts.
- Author:
- Cortex XSOAR
- Support:
- xsoar
agentixxsiam
Data Enrichment & Threat Intelligence
Classifiers (3)
Incident fields (19)
- SymantecEDR Antivirus
- SymantecEDR Detection Type
- SymantecEDR Enriched Data
- SymantecEDR Event Actor
- SymantecEDR Event Actor File
- SymantecEDR Event Actor User
- SymantecEDR Event Process
- SymantecEDR Event Type ID
- SymantecEDR Incident Comments
- SymantecEDR Incident Events
- SymantecEDR Intrusion
- SymantecEDR Log Name
- SymantecEDR Process File
- SymantecEDR Process User
- SymantecEDR Recommended Action
- SymantecEDR Rule ID
- SymantecEDR Scan
- SymantecEDR Threat
- SymantecEDR attacks
Incident types (2)
Integrations (1)
README
Symantec Endpoint Detection and Response (EDR) Integration
Symantec EDR uses machine learning and behavioral analytics to detect and expose suspicious network activities. Symantec EDR alerts you about potentially harmful activity, prioritizes incidents for quick triage, and lets you navigate endpoint activity records during your forensic analysis of potential attacks.
Symantec EDR lets you contain suspicious events, isolate potentially compromised devices, and delete malicious files and associated artifacts.