Skip to main content


Download With Dependencies

Agentless and passive security platform that sees, identifies, and classifies every device, tracks behavior, identifies threats, and takes action automatically to protect critical information and systems

Note: Support for this Pack was moved to Partner starting October 10, 2022.
Please contact the partner directly via the support link on the right.

Armis is an agentless, enterprise-class security platform to address the threat landscape of unmanaged and IoT devices. We discover every managed, unmanaged, and IoT device on and off of your network, analyze device behavior to identify risks or attacks, and protect your critical business information and systems. This Pack contains Armis incident fields and provides the ability to interface with the Armis system

What does this pack do?

The Integrations and Playbooks in this pack provide the following functionality:

  • Fetch incidents from an Armis instance.
  • Search for Armis Alerts.
  • Search for Devices connected to an Alert.
  • Tag and Untag Devices.
  • Set the status of Armis Alerts.
  • Enrich an Alert with the details of the related Devices.


Armis Corporation


Cortex XSOARCortex XSIAM


CertificationRead more
Supported ByPartner
CreatedApril 20, 2021
Last ReleaseNovember 16, 2022

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.