Use McAfee Active Response to collect data from an endpoint for IR purposes (requires ePO as well).
Input:
- Hostname (Default: ${Endpoint.Hostname})
McAfee Active Response
- Details
- Content
- Dependencies
- Version History
- Download With Dependencies
Connect to MAR using its DXL client
PUBLISHER
Cortex XSOAR
INFO
| Certification | Certified | Read more |
| Supported By | Cortex XSOAR | |
| Created | November 9, 2020 | |
| Last Release | December 30, 2021 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.Playbooks
Integrations
Required Content Packs (10)
Optional Content Packs (0)
1.0.3 - 2183875 (December 30, 2021)
1.0.2 - R2146019 (December 21, 2021)
1.0.1 - R264879 (November 9, 2020)