FireEye Central Management (CM)

Version: 1.1
Updated: Jul 06, 2023

Centralized device and intelligence management to correlate data across attack vectors.

Actions

• Get Alert Info (Enrichment) - Query FireEye CM for alert details.
• Get ATI Details (Enrichment) - Query FireEye Advanced Threat Intelligence for intelligence data.
• Get Event Info (Enrichment) - Get information from previously generated event.
• Add Snort Rule (Containment) - Add a new Snort rule.
• Add YARA Rule (Containment) - Add a new YARA rule.
• Acknowledge Alert (Containment) - Notate previously generated alert.

Change Log

• June 21, 2019 - First upload
• July 6, 2023 (v1.1) - Updated the integration with Environmental Variables