Symantec EDR

Version: 1.1
Updated: Jul 11, 2023

Symantec EDR detects and exposes suspicious network activity, alerts to potentially harmful activity, prioritizes incidents for quick triage, and can navigate endpoint activity records during forensic analysis of potential attacks.

Actions

• List Incidents (Enrichment) - Retrieve incidents.
• Get Incident (Enrichment) - Retrieve details for a specific incident.
• Get Events For Incidents (Enrichment) - Get Incident Related Events.
• Process Lineage Events (Enrichment) - Retrieve process lineage events for a specific incident.

Change Log

• October 27, 2021 - First upload
• July 11, 2023 (v1.1) - Updated the integration with Environmental Variables