Runs queries and receives alarms from McAfee Enterprise Security Manager (ESM). Supports version 11.6 and later.
McAfee ESM
- Details
- Content
- Dependencies
- Version History
Run queries and receive alarms from Intel Security ESM.
Integrations
| Name | Description |
|---|---|
| McAfee ESM v2 |
Integrations
| Name | Description |
|---|---|
| McAfee ESM v2 | Runs queries and receives alarms from McAfee Enterprise Security Manager (ESM). Supports version 11.6 and later. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
2.0.0 - 13584901 (October 6, 2026)
- 45992
Download
Integrations
McAfee ESM v2
- Updated the minimum supported ESM version to 11.6.0. Support for earlier versions was removed, as they reached Trellix end-of-life.
- Updated the Version parameter to take the version number of the ESM instance, for example 11.6.11. Instances configured with a version earlier than 11.6.0 now fail with an explicit error until the parameter is updated.
- Added support for Trellix ESM 11.6.11 and later, which require the login credentials to be AES-encrypted. The integration applies the encryption automatically, so no manual encryption is required.
- Improved implementation to cache the ESM session between command executions instead of logging in on every run.
- Fixed an issue where credentials containing non-ASCII characters caused the login to fail.
- Updated the Docker image to: demisto/crypto:1.0.0.12833174.
- 45992
Download
2.0.0 - R13599546 (October 7, 2026)
- 45992
Download
Integrations
McAfee ESM v2
- Updated the minimum supported ESM version to 11.6.0. Support for earlier versions was removed, as they reached Trellix end-of-life.
- Updated the Version parameter to take the version number of the ESM instance, for example 11.6.11. Instances configured with a version earlier than 11.6.0 now fail with an explicit error until the parameter is updated.
- Added support for Trellix ESM 11.6.11 and later, which require the login credentials to be AES-encrypted. The integration applies the encryption automatically, so no manual encryption is required.
- Improved implementation to cache the ESM session between command executions instead of logging in on every run.
- Fixed an issue where credentials containing non-ASCII characters caused the login to fail.
- Updated the Docker image to: demisto/crypto:1.0.0.12833174.
- 45992
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | September 9, 2020 | |
| Last Release | October 6, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
