McAfee ESM

Version: 1.1
Updated: Jul 11, 2023

Work with McAfee ESM Events, Alarms, and Watchlists.

Actions:

Get Filter Fields (Enrichment) - Get a list of valid filter fields.
Get Raw Logs From Event ELM ELS (Enrichment) - Get the raw logs pertaining to an event.
Get Watchlists (Enrichment) - Get a list of watchlists.
List Correlated Events (Enrichment) - LIst events which are correlated with the Event ID.
List Users (Enrichment) - Get a list of users.
Search Into McAfee ESM Alarms (Enrichment) - Search Alarms.
Search Into McAfee ESM Events (Enrichment) - Search Events.
Acknowledge Alarm (Containment) - Acknowledge an Alarm.
Add To Watchlist (Containment) - Add a value to a watchlist.
Remove From Watchlist (Containment) - Remove a value from a watchlist.
Search McAfee ESM Alarm Daemon (Daemon) - Daemon for searching alarms.
Get Select Fields (Enrichment) - Get a list of select fields.

Change Log