🌙
 

Subscribe to the Taegis™ XDR Documentation RSS Feed at .

Learn more about RSS readers or RSS browser extensions.

NIDS

detectors


The Network Intrusion Detection Systems (NIDS) detector collects and normalizes Intrusion Detection and Prevention (IDP) events from third-party data sources. As part of the normalization process, the events are converted into an alert and assigned a severity and confidence based on the activity observed. The resulting alerts are written to the Secureworks® Taegis™ XDR alert database and published to the dashboard for additional review and analysis. The following integrations are currently handled by the NIDS detector:

In addition, the network telemetry collected by the supported integrations is available to the following Secureworks® Taegis™ XDR detectors:

NIDS Alert

NIDS Alert

Inputs

Intrusion Detection and Prevention events from third-party data sources ingested and normalized into Secureworks® Taegis™ XDR.

Outputs

NIDS alerts pushed to the Secureworks® Taegis™ XDR Alert Database and Secureworks® Taegis™ XDR Dashboard.

MITRE ATT&CK Category

MITRE mapping is based on alerting data provided by relevant device(s).

Detector Requirements

 

On this page: