## Run queries and receive alarms from Intel Security ESM. Support version 10 and above.

#### Required Permissions
| Component | Permission |
| --- | --- |
| Alarms | Alarm Management *and* View Data |
| Cases | Incident Management Administrator *and* Incident Management User |
| Watchlists | Watchlists |

##### The *Timezone* parameter should be set according to the timezone that McAfee ESM uses. For example, if the alarms in ESM are -0600 then the timezone should be set to -6.


---
[View Integration Documentation](https://xsoar.pan.dev/docs/reference/integrations/mc-afee-esm-v2)