🌙
 

Subscribe to the Taegis™ XDR Documentation RSS Feed at .

Learn more about RSS readers or RSS browser extensions.

Data Source Integration Definitions

integrations detections detectors


The following are definitions for normalization and detection outcomes referenced in integration documentation.

Normalized

Logs from the data source are normalized to one or more Taegis™ XDR schemas. This level of integration provides:

Out-of-the-Box Detections

Logs from the data source are normalized to one or more Taegis™ XDR schemas and are compatible with Taegis™ XDR native detectors. Alerts may be generated by Watchlists, Tactic Graph™ detectors and/or Advanced Detectors.

Vendor-Specific Detections

Logs from the data source are normalized to one or more Taegis™ XDR schemas and are compatible with detectors have been created specifically for this data source. Taegis™ XDR alerts may be generated by promotion of vendor alerts to Watchlists and/or Tactic Graph™ detectors.

 

On this page: