FireEye Network Security (NX)

Details
Content
Dependencies
Version History
Download With Dependencies

FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted, and other evasive attacks hiding in Internet traffic.

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	November 9, 2020
Last Release	May 16, 2022

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Classifiers

Name	Description
FireEye NX Incoming Mapper	Maps incoming FireEye NX incident fields.
FireEye NX - Classifier	Classifies FireEye NX Incidents.

Integrations

Name	Description
FireEye NX	FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted, and other evasive attacks hiding in internet traffic.

Incident Fields

Name	Description
FireEye NX Alert Target IP	Destination IP address of alert.
FireEye NX Alert ID	ID of the alert.
FireEye NX Alert Victim IP	Source IP of the alert.
FireEye NX Alert Action	Action of the alert.
FireEye NX Alert Malware Name	Malware Name of the alert.
FireEye NX Event ID	ID of the event.
FireEye NX Alert Target Port	Destination Port address of alert.
FireEye NX Event Destination MAC Address	Destination MAC Address of the event.
FireEye NX Alert Type	The type of the alert.
FireEye NX Event Rule	Rule of the event.
FireEye NX Alert UUID	UUID of the alert.
FireEye NX Event Source MAC Address	Source MAC Address of the event.
FireEye NX Alert Target MAC Address	Destination MAC address of alert.
FireEye NX Event Victim Port	Source Port of the event.
FireEye NX Event Victim IP	Source IP of the event.
FireEye NX Event Destination Port	Destination Port of the event.
FireEye NX Alert Victim Port	Source Port Address of the alert.
FireEye NX Alert SC Version	SC Version of the alert.
FireEye NX Alert URL	URL of alert.
FireEye NX Alert Victim MAC Address	Source MAC address of alert.
FireEye NX Event CVE ID	CVE ID of the event.
FireEye NX Event Attacker IP	Destination IP of the event.

Incident Types

Name	Description
FireEye NX IPS Event
FireEye NX Alert

Layouts

Name	Description
FireEye NX IPS Event	FireEye NX IPS Event Layout
FireEye NX Alert	FireEye NX Alert Layout

Required Content Packs (20)

Pack Name	Pack By
PaloAltoNetworks_IoT	By: Cortex XSOAR
Base	By: Cortex XSOAR
GoogleChronicleBackstory	By: Partner
Phishing	By: Cortex XSOAR
FireEyeCommonFields	By: Cortex XSOAR
NIST	By: Cortex XSOAR
SANS	By: Cortex XSOAR
CommonTypes	By: Cortex XSOAR
CommonPlaybooks	By: Cortex XSOAR
CommonScripts	By: Cortex XSOAR
ServiceNow	By: Cortex XSOAR
Sixgill-Darkfeed	By: Partner
PAN-OS	By: Cortex XSOAR
PaloAltoNetworks_PAN_OS_EDL_Management	By: Cortex XSOAR
FiltersAndTransformers	By: Cortex XSOAR
rasterize	By: Cortex XSOAR
DemistoRESTAPI	By: Cortex XSOAR
Compliance	By: Cortex XSOAR
BruteForce	By: Cortex XSOAR
Malware	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

1.1.2 - 2927997 (May 16, 2022)

Integrations

FireEye NX

Updated the Docker image to: demisto/python3:3.10.4.29342.