Hello,Is there a good example how to use the Secure Endpoint API to extract only the threats detected?I saw an article regarding the events endpoint and all alert_types to filter, but is that the only way?https://developer.cisco.com/docs/secure-endpo...
Forum Posts
Early this morning, we received 2 retrospective detections for putty-64bit-0.73-installer.msi/sha256: 31d001504b56e47d7e90b39a6fde6acf949e8c59d4717abac35eef0b932f89d7 with a classification of malicious my Cisco. Filescan.io indicates no detections/no...
Firstly, apologies if you've not seen this. It was launched a while ago, and I've only just stumbled upon ithttps://youtu.be/HIJrktiaQ_oEssentially, Limited Access Roles give you the ability to segment a Systems Manager network, so that admin A can o...
We are looking to do an in place upgrade of our current TETRA update server from 2016 to 2022. After the upgrade is complete how would I determine if the server is pulling down current TETRA updates?Can I compare the files in C:\Tetra\Signatures to s...
Hello, We have cisco secure endpoint cloud and would like to migrate to private cloud appliance. My question is: Should we re-install connectors on endpoint or is there a way to change configuration and point them to private cloud appliance?
Resolved! API query with an exact match?
Good morning. When I do an api call, for groups, using this URI:https://api.amp.cisco.com/v1/groups?name=Protect It returns all of the groups with 'Protect' in their names...Is there a way to tell the API to just return the ONE group with the name of...
Hello community! Currently evaluating Meraki SM with out Meraki networking. Trying out simple things. One of them is to create WiFi profile for EAP-TLS using Meraki Local Auth. No matter what I try, not able to connect to Meraki AP with the pushed pr...
Is there a way to have devices auto assign to a group based on a partial name of that device using Cisco Secure Endpoint?
"Hello,I am inquiring whether Cisco XDR offers solutions for restricted environments that are not connected to the internet. Specifically, I am interested in a setup similar to the AMP private cloud, where network devices and endpoints can connect to...
After we updated our Windows servers to the latest "AMP" conector 8.4.0 we see alerts/error in our SCOM environment.It is the CiscoSecureEndpoint Service Launcher that fail with exit code 267011, at the same time we see on the local server that the S...
Anybody else getting retrospective detections for these files? They are created by legitimate svchost.exeLooks like they must be components of Dev HomeDev Home for Windows Developers | Microsoft LearnDevHome.RegistryPreview.exe47f2ecbbc1f812b63042c8...
I manage several schools that use different management systems like Jamf and Meraki for iPad and Google Chrome OS managment. Jamf has a very easy to use LDAP system to pull data from Google Workspace for device assignment. it's not perfect but it gen...
You may be getting errors when using the portal. It's because Google are mandating that you accept the new terms and conditions:https://www.androidenterprise.community/t5/service-announcements/fix-available-toserror-responses-accessing-zero-touch-cus...
Is there a way to initiate an endpoint scan with Cisco AMP from the API?
Greetings to all,I am having a situation in which I am getting computer duplicates in the Cisco Secure Endpoint Console. I am well aware that there is a special procedure for prepping a golden image, setting up identity persistence and using scripts...