cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Register for SecureX webinars to learn about our newest integrations and features.

1156
Views
0
Helpful
0
Replies
securviewsupport
Beginner

How to create CTR Incident in SecureX



Hello,

I want to created CTR incident in SecureX, Please suggest how can I create?

Below are the requirements:
1. I have created one workflow to fetch offenses from SIEM  and I am able to fetched offenses like open, close.
but how can I fetch all live offenses from SIEM?
2. I want to convert offense's output JSON format to table. How can I create workflow?

3. Also I want to check reputation for IP address which are in that offense. how can I create workflow?

4.  Then last, I want to Create CTR incident in SecureX.

 

Please suggest on this.

 

0 REPLIES 0
Create
Recognize Your Peers
Content for Community-Ad
Additional Cisco Threat Response Resources


August's Community Spotlight Awards