Skip to main content

Armis

Agentless and passive security platform that sees, identifies, and classifies every device, tracks behavior, identifies threats, and takes action automatically to protect critical information and systems

Armis is an agentless, enterprise-class security platform to address the threat landscape of unmanaged and IoT devices. We discover every managed, unmanaged, and IoT device on and off of your network, analyze device behavior to identify risks or attacks, and protect your critical business information and systems. This Pack contains Armis incident fields and provides the ability to interface with the Armis system

What does this pack do?

The Integrations and Playbooks in this pack provide the following functionality:

  • Fetch incidents from an Armis instance.
  • Search for Armis Alerts.
  • Search for Devices connected to an Alert.
  • Tag and Untag Devices.
  • Set the status of Armis Alerts.
  • Enrich an Alert with the details of the related Devices.

PUBLISHER

Cortex XSOAR

INFO

CertificationRead more
Supported ByCortex XSOAR
CreatedApril 20, 2021
Last ReleaseSeptember 16, 2021
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.