Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Threat Response integrates with Cisco's Web Security Appliance (WSA) to provide visibility into web-bourne threats. By adding a Web Security or SMA Web module to Threat Response, investigators will be able to search for domains, URLs, and file hash...
Threat Response integrates with Cisco Stealthwatch Enterprise (SWE) to provide Visibility into network threats. By adding an SWE module to Threat Response, investigators will be able to search for network flows to or from IP addresses that have been...
There's a lot of material published about Threat Response, in places like http://cisco.com/go/threatresponse - but something I get asked by users is what can they do, to proactively stay informed and up to date? We are adding new integrations and new...
Threat Response integrates with Cisco's Email Security Appliance (ESA) to provide Visibility into email-bourne threats. By adding an Email Security or SMA Email module to Threat Response, investigators will be able to search for email subject lines,...
Question
How do I configure a SecureX browser plugin?
Answer
*Updated 2021-01-04 to describe new plugin availability
The browser plugins are easily configured.
First you need to generate an "API Client" in SecureX. An API Client is essentially a...
Hi Rekha,While it's possible to use the Global Intel API to fetch judgements, it may not be the best approach, as it leaves out all of your other XDR modules. Is there a specific reason that you only want results from that source? The better, more co...
Hi Aash,
> 1. How can I build integrations within the Cisco XDR platform? I’ve noticed many third-party integrations, such as CrowdStrike, ServiceNow, and Slack. Are these integrations developed and managed by the Cisco XDR team, or can individual d...
How to implement a custom SecureX integration is dependent on what you want the integration to achieve. - If you want Defender and Sentinel to forward incidents into SecureX for handling, you will need those technologies to make calls to the SecureX ...
