Contains a tab XMCyber with fields for XM Cyber Technique Incident

Contains a tab XMCyber with fields for XM Cyber Score Incident

Contains a tab XMCyber with fields for XM Cyber Incident

Link to the Entity report in XM Cyber

The average and minimum complexities of attacks to assets from this entity

Name of each attack technique that has compromised the entity and the count such attack vectors from the time period

Maps Crowdstrike Falcon incident data to XM Cyber fields for automatic enrichment

Classifies XM Cyber alerts and events into 4 types

Maps fields from XM Cyber incidents

An example of playbook using data from XM Cyber to help decide about scanning and isolating a threat

XM Cyber generates a Jira ticket based on the trend in the Security Score

Enrich an endpoint by hostname using XM Cyber integration. Outputs include affected assets, affected entities, complexity of compromise, and more

Enrich an endpoint by entityId using XM Cyber integration. Outputs include affected assets, affected entities, complexity of compromise, and more

Enrich IP addresses using XM Cyber integration.

• Resolve IP address to entity
• Get entity information for IP addresses regarding impact on critical assets and complexity of compromise

The XM Cyber integration creates unique incidents with valuable data collected daily, and enriches your existing incidents with attack simulation context. This enables you to prioritize your responses based on XM Cyber’s insights.

Link to the Entity report in XM Cyber

The average and minimum complexities of attacks to assets from this entity

Name of each attack technique that has compromised the entity and the count such attack vectors from the time period

Maps Crowdstrike Falcon incident data to XM Cyber fields for automatic enrichment

Classifies XM Cyber alerts and events into 4 types

Maps fields from XM Cyber incidents

An example of playbook using data from XM Cyber to help decide about scanning and isolating a threat

XM Cyber generates a Jira ticket based on the trend in the Security Score

Enrich an endpoint by hostname using XM Cyber integration. Outputs include affected assets, affected entities, complexity of compromise, and more

Enrich an endpoint by entityId using XM Cyber integration. Outputs include affected assets, affected entities, complexity of compromise, and more

Enrich IP addresses using XM Cyber integration.

• Resolve IP address to entity
• Get entity information for IP addresses regarding impact on critical assets and complexity of compromise

The XM Cyber integration creates unique incidents with valuable data collected daily, and enriches your existing incidents with attack simulation context. This enables you to prioritize your responses based on XM Cyber’s insights.