Vectra RUX pack empowers the SOC to create incidents based on events detection using Vectra AI's Attack Signal Intelligence.
Vectra RUX pack allows the security operations center to create incidents based on Events Detections, powered by Vectra AI's Attack Signal Intelligence. This pack enables security teams to synchronize the Vectra RUX Detections with Cortex XSOAR incidents in real time, making it feasible to manage operations from a single place.
What does this pack do?
- Fetch detections from Vectra RUX.
- List and Describe Entities and Detections.
- List, Create, Update, and Resolve Entity Assignments.
- List, Create, Update, and Delete Entity notes.
- List, Create, Update, and Delete Detection notes.
- List, Update, and Remove Entity tags.
- List, Update, and Remove Detection tags.
- List, Assign, and Unassign members in Group.
- Download PCAP of detection.
- Update Investigation Status of the Detection.
- Reset unresolved-priority of an Entity.
- Update the External Reference ID of an Entity and Detection.
- Send Investigation Query and Get Results for an Investigation Query.
Support
If you have questions or concerns about the content you're receiving, please reach out for support at https://support.vectra.ai or support@vectra.ai.
For more information, visit our Cortex XSOAR Developer Docs
Vectra RUX pack allows the security operations center to create incidents based on Events Detections, powered by Vectra AI's Attack Signal Intelligence. This pack enables security teams to synchronize the Vectra RUX Detections with Cortex incidents in real time, making it feasible to manage operations from a single place.
What does this pack do?
- Fetch detections from Vectra RUX.
- List and Describe Entities and Detections.
- List, Create, Update, and Resolve Entity Assignments.
- List, Create, Update, and Delete Entity notes.
- List, Create, Update, and Delete Detection notes.
- List, Update, and Remove Entity tags.
- List, Update, and Remove Detection tags.
- List, Assign, and Unassign members in Group.
- Download PCAP of detection.
- Update Investigation Status of the Detection.
- Reset unresolved-priority of an Entity.
- Update the External Reference ID of an Entity and Detection.
- Send Investigation Query and Get Results for an Investigation Query.
Support
If you have questions or concerns about the content you're receiving, please reach out for support at https://support.vectra.ai or support@vectra.ai.
For more information, visit our Cortex XSOAR Developer Docs
