Symantec EDR

Version: 1.1
Updated: Jul 11, 2023

Symantec EDR detects and exposes suspicious network activity, alerts to potentially harmful activity, prioritizes incidents for quick triage, and can navigate endpoint activity records during forensic analysis of potential attacks.

Actions

List Incidents (Enrichment) - Retrieve incidents.
Get Incident (Enrichment) - Retrieve details for a specific incident.
Get Events For Incidents (Enrichment) - Get Incident Related Events.
Process Lineage Events (Enrichment) - Retrieve process lineage events for a specific incident.

Change Log

October 27, 2021 - First upload
July 11, 2023 (v1.1) - Updated the integration with Environmental Variables

Actions​

Change Log​

Actions

Change Log