FireEyeNX

Details
Content
Version History

FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted and other evasive attacks hiding in Internet traffic.

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	November 9, 2020
Last Release	January 10, 2021

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Classifiers

Name	Description
FireEye NX - Classifier	Classifies FireEye NX Incidents.
FireEye NX Incoming Mapper	Maps incoming FireEye NX incident fields.

Incident Fields

Name	Description
FireEye NX Alert Action	Action of the alert.
FireEye NX Alert ID	ID of the alert.
FireEye NX Alert Malware Name	Malware Name of the alert.
FireEye NX Alert SC Version	SC Version of the alert.
FireEye NX Alert Target IP	Destination IP address of alert.
FireEye NX Alert Target MAC Address	Destination MAC address of alert.
FireEye NX Alert Target Port	Destination Port address of alert.
FireEye NX Alert Type	The type of the alert.
FireEye NX Alert URL	URL of alert.
FireEye NX Alert UUID	UUID of the alert.
FireEye NX Alert Victim IP	Source IP of the alert.
FireEye NX Alert Victim MAC Address	Source MAC address of alert.
FireEye NX Alert Victim Port	Source Port Address of the alert.
FireEye NX Event Attacker IP	Destination IP of the event.
FireEye NX Event CVE ID	CVE ID of the event.
FireEye NX Event Destination MAC Address	Destination MAC Address of the event.
FireEye NX Event Destination Port	Destination Port of the event.
FireEye NX Event ID	ID of the event.
FireEye NX Event Rule	Rule of the event.
FireEye NX Event Source MAC Address	Source MAC Address of the event.
FireEye NX Event Victim IP	Source IP of the event.
FireEye NX Event Victim Port	Source Port of the event.

Incident Types

Name	Description
FireEye NX Alert
FireEye NX IPS Event

Integrations

Name	Description
FireEye NX	FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted, and other evasive attacks hiding in internet traffic.

Layouts

Name	Description
FireEye NX Alert	FireEye NX Alert Layout
FireEye NX IPS Event	FireEye NX IPS Event Layout

FireEyeNX 1.0.1 355518

PUBLISHER

INFO

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Layouts