Tags

Contents grouped by tag

active directory ⫘

• Microsoft Azure Active Directory Activity Reports Integration Guide

advanced search ⫘

• Configure Custom Reports

• Common Report Queries

• Related Alerts and Events Timeline View

• Saved Searches

• Search History

• Sensor Types

• Advanced Search Builder

• Advanced Search Query Language

adversary software coverage ⫘

• FAQ — Adversary Software Coverage

• Adversary Software Coverage

akamai ⫘

• Akamai App and API Protector

• Akamai Enterprise Application Access (EAA) Integration Guide

alerts ⫘

• Alert Details

• Alert Group Key

• Alert Severity and Confidence

• Alerts

• Resolve Alerts (Change Alert Status)

• Alert Triage Dashboard

• Taegis™ ManagedXDR Dashboard

• Threat Intelligence Alert Enrichment

• Start and Add to Investigations

• Alert Suppression Rules

• Custom Alert Rules

• Pivot Search

• Related Alerts and Events Timeline View

• CyberChef

• Threat Score

alienvault ⫘

• AlienVault OTX Integration Guide

amazon ⫘

• AWS Data Collector

• Find Your AWS Account ID

• AWS ALBLogs Integration Guide

• Amazon GuardDuty Integration Guide

• AWS VPC Flow Logs Integration Guide

• AWS WAF Logs Integration Guide

• AWS CloudTrail Integration Guide

• Working With Multiple CloudTrail Accounts

• Remove Cloud Permissions

• S3 Event Archiving

• Test AWS Lambda Logs

• View AWS Lambda Logs

• Lambda Migration

• Add AWS Lambda Trigger

anomali ⫘

• Anomali Integration Guide

api ⫘

• XDR API Reporting

api guides ⫘

• Authenticating with Taegis™ XDR GraphQL APIs

• Getting Started with the Alerts GraphQL API

• Getting Started with the Assets GraphQL API

• Getting Started with the Audits GraphQL API

• Using the Automation GraphQL APIs

• Getting Started with the Collector GraphQL API

• Using the Countermeasures API

• Getting Started with the Investigations GraphQL API

• Getting Started with the Threat Intelligence GraphQL API

• Using the Users API

• Using Taegis™ XDR APIs

• Power BI for Taegis XDR

api protector ⫘

• Akamai App and API Protector

aruba ⫘

• Aruba ClearPass Integration Guide

automation ⫘

• Configured Connections

• Configured Playbooks

• Connector Library

• Manage Connector Versions

• Automations Overview

• Playbook Templates

• Manage Playbook Template Versions

• Playbooks History

• Playbooks Overview

• Supported Connectors

• Supported Playbooks

• On-Premise Automation Connector

• XDR Customization Services

aws ⫘

• AWS Data Collector

• Find Your AWS Account ID

• AWS ALBLogs Integration Guide

• Amazon GuardDuty Integration Guide

• AWS VPC Flow Logs Integration Guide

• AWS WAF Logs Integration Guide

• AWS CloudTrail Integration Guide

• Working With Multiple CloudTrail Accounts

• Remove Cloud Permissions

• S3 Event Archiving

• Test AWS Lambda Logs

• View AWS Lambda Logs

• Lambda Migration

  • Add AWS Lambda Trigger

azure ⫘

• Azure Data Collector

• Microsoft Azure Activity Log Integration Guide

• Office 365 and Azure Integration Guide

• Permissions Used by Taegis™ XDR for Microsoft 365 and Azure Integrations

• Office 365 and Azure Data Availability

• Microsoft Azure Event Hubs Integration Guide

• Microsoft Azure Active Directory Activity Reports Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Firewall Integration Guide

• Microsoft Azure Front Door Integration Guide

azure waf ⫘

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Front Door Integration Guide

barracuda ⫘

• Barracuda NGFW Integration Guide

• Barracuda WAF Integration Guide

azure government ⫘

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

blue coat ⫘

• Symantec (Blue Coat) ProxySG Integration Guide

builder ⫘

• Configure Custom Reports

• Common Report Queries

• Saved Searches

• Search History

• Sensor Types

• Advanced Search Builder

byoti ⫘

• AlienVault OTX Integration Guide

• Anomali Integration Guide

• Bring Your Own Threat Intel (BYOTI)

• TAXII 2.1 Integration Guide

carbon black ⫘

• Carbon Black Response Cloud Integration Guide

• VMware Carbon Black Cloud Endpoint Standard and Enterprise EDR Integration Guide

• Add a Carbon Black Integration

cato ⫘

• Cato Networks

check point ⫘

• Check Point Integration Guide

cisco ⫘

• Cisco Umbrella Integration Guide

• Cisco ASA Integration Guide

• Cisco FTD Firewall Integration Guide

• Cisco IOS and NX-OS Integration Guide

• Cisco Ironport Integration Guide

• Cisco ISE

• Cisco Meraki Integration Guide

• Cisco Duo Integration Guide

citrix ⫘

• Citrix ADC Integration Guide

close codes ⫘

• Close an Investigation

cloud ⫘

• Manage Cloud API Integrations

• Find Your AWS Account ID

• AWS ALBLogs Integration Guide

• Amazon GuardDuty Integration Guide

• AWS VPC Flow Logs Integration Guide

• AWS WAF Logs Integration Guide

• Microsoft Azure Activity Log Integration Guide

• Office 365 and Azure Integration Guide

• Permissions Used by Taegis™ XDR for Microsoft 365 and Azure Integrations

• Cisco Umbrella Integration Guide

• AWS CloudTrail Integration Guide

• Mimecast Integration Guide

• Working With Multiple CloudTrail Accounts

• Netskope SSE Integration Guide

• Office 365 and Azure Data Availability

• Okta Integration Guide

• Proofpoint Targeted Attack Protection (TAP) Integration Guide

• Remove Cloud Permissions

• S3 Event Archiving

• Test AWS Lambda Logs

• View AWS Lambda Logs

• AlienVault OTX Integration Guide

• Anomali Integration Guide

• TAXII 2.1 Integration Guide

• Lambda Migration

• Google Cloud Platform Integration Guide

• Google Workspace Integration Guide

• Akamai App and API Protector

• Akamai Enterprise Application Access (EAA) Integration Guide

• Add AWS Lambda Trigger

• Cisco Duo Integration Guide

• Office 365 Management API Integration Guide

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

• Microsoft Azure Event Hubs Integration Guide

• Microsoft Azure Active Directory Activity Reports Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Firewall Integration Guide

• Microsoft Azure Front Door Integration Guide

• Microsoft Entra Risk Detection Integration Guide

• Microsoft Graph Security Alerts Integration Guide

cloud apis ⫘

• Manage Cloud API Integrations

• Remove Cloud Permissions

cloud waf ⫘

• Imperva Cloud WAF Integration Guide

cloudflare ⫘

• Cloudflare

cloudtrail ⫘

• AWS CloudTrail Integration Guide

• Working With Multiple CloudTrail Accounts

comments ⫘

• Work an Investigation

connections ⫘

• Configured Connections

• Connector Library

connectors ⫘

• Configured Connections

• Connector Library

• Manage Connector Versions

• Automations Overview

• Supported Connectors

corelight ⫘

• Corelight Integration Guide

crowdstrike ⫘

• CrowdStrike

CTU countermeasures ⫘

• Security Posture Dashboard

custom parsers ⫘

• Custom Parsers Overview

• Custom Parser Syntax

• Overriding and Extending Global Parsers

• XDR Custom Data Source Integration

• XDR Customization Services

• Secureworks Professional Services

cyberark ⫘

• CyberArk

Darktrace ⫘

• Darktrace

dashboards ⫘

• Alert Triage Dashboard

• Taegis™ ManagedXDR Dashboard

• My Dashboards

• Security Posture Dashboard

data collectors ⫘

• Add the eStreamer App to the Data Collector

• AWS Data Collector

• Azure Data Collector

• Splunk Heavy Forwarder

• Google Cloud Platform (GCP) Collector

• Integration Overview

• Manage Data Collectors

• On-Premise Automation Connector

• TLS Enabled Syslog

• On-Premises HA Data Collector

• On-Premises Data Collector

data sources ⫘

• Data Sources

• Integration Overview

deep security ⫘

• Trend Micro Deep Security

detections ⫘

• Data Source Integration Definitions

detectors ⫘

• Account Compromise

• Brute Force

• Business Email Compromise

• Cloud Watchlist

• Domain Generation Algorithms

• Domain Watchlist

• Email Watchlist

• Endpoint Watchlists

• Hands On Keyboard

• Detector Test Alerts

• Impossible Travel

• IP Watchlist

• Kerberoasting Detector

• NIDS

• Password Spray

• Portscanning and Broadscanning

• Punycode

• Quick Mail Consent (MS O365)

• Rare Program to Rare IP

• SharpHound

• Snapshot Exfiltration Detector

• Stolen User Credentials

• Suspicious DNS Activity

• Tactic Graphs™

• Taegis™ NDR Detectors

• Taegis™ Watchlist

• Data Source Integration Definitions

downloads ⫘

• Data Exports

edr ⫘

• Manage Endpoints

• Red Cloak™ Endpoint Agent for VDI or Cloud Instance Deployments

• Carbon Black Response Cloud Integration Guide

• CrowdStrike

• Manage Endpoint Agents

• Microsoft Defender for Endpoint Integration Guide

• Red Cloak™ Endpoint Agent Changelog

• FAQ: Red Cloak™ Endpoint Agent

• Red Cloak™ Endpoint Agent Installation

• Red Cloak™ Endpoint Agent Technical Details

• Red Cloak™ Endpoint Agent Troubleshooting

• Red Cloak™ Endpoint Agent Uninstall

• Red Cloak™ Endpoint Agent Supported Operating Systems and System Requirements

• VMware Carbon Black Cloud Endpoint Standard and Enterprise EDR Integration Guide

• Add a Carbon Black Integration

• SentinelOne

• Taegis™ Agent Changelog

• Taegis™ Agent Downloads

• Taegis™ Endpoint Management

• Taegis™ Agent Host Isolation Exceptions

• FAQ: Taegis™ Agent

• Taegis™ Agent Groups

• Taegis™ Agent Installation Information and Prerequisites

• Taegis™ Endpoint Agent Introduction

• Taegis™ Linux Agent Installation

• Taegis™ Linux Agent Troubleshooting

• Taegis™ macOS Agent Installation

• Taegis™ macOS Agent Troubleshooting

• Taegis™ Agent Supported Operating Systems and System Recommendations

• Taegis™ Endpoint Tags

• Taegis™ Agent Technical Details

• Taegis™ Agent Troubleshooting

• Taegis™ Agent Uninstall

• Taegis™ Windows Agent Installation

• Taegis™ Windows Agent Troubleshooting

endpoint agents ⫘

• Integration Overview

endpoints ⫘

• What Does Secureworks Consider an Endpoint?

• Manage Endpoints

• Isolate a Red Cloak™ Endpoint

• Red Cloak™ Endpoint Agent for VDI or Cloud Instance Deployments

• Carbon Black Response Cloud Integration Guide

• CrowdStrike

• Manage Endpoint Agents

• Linux Servers Integration Guide

• Microsoft Defender for Endpoint Integration Guide

• Microsoft DHCP Integration Guide

• Microsoft DNS Integration Guide

• Microsoft IIS Integration Guide

• Red Cloak™ Endpoint Agent Changelog

• FAQ: Red Cloak™ Endpoint Agent

• Red Cloak™ Endpoint Agent Installation

• Red Cloak™ Endpoint Agent Technical Details

• Red Cloak™ Endpoint Agent Troubleshooting

• Red Cloak™ Endpoint Agent Uninstall

• Red Cloak™ Endpoint Agent Supported Operating Systems and System Requirements

• Taegis™ NGAV Agent

• Taegis™ NGAV FAQ

• VMware Carbon Black Cloud Endpoint Standard and Enterprise EDR Integration Guide

• Microsoft Windows Event Log Integration Guide

• Add a Carbon Black Integration

• SentinelOne

• Taegis™ Agent Changelog

• Taegis™ Agent Downloads

• Taegis™ Endpoint Management

• Taegis™ Agent Host Isolation Exceptions

• FAQ: Taegis™ Agent

• Taegis™ Agent Groups

• Taegis™ Agent Installation Information and Prerequisites

• Taegis™ Endpoint Agent Introduction

• Taegis™ Linux Agent Installation

• Taegis™ Linux Agent Troubleshooting

• Taegis™ macOS Agent Installation

• Taegis™ macOS Agent Troubleshooting

• Taegis™ Agent Supported Operating Systems and System Recommendations

• Taegis™ Endpoint Tags

• Taegis™ Agent Technical Details

• Taegis™ Agent Troubleshooting

• Taegis™ Agent Uninstall

• Taegis™ Windows Agent Installation

• Taegis™ Windows Agent Troubleshooting

entity graph ⫘

• Explore an Investigation in Detail with Entity Graph

entra ⫘

• Microsoft Azure Active Directory Activity Reports Integration Guide

• Microsoft Entra Risk Detection Integration Guide

estreamer ⫘

• Add the eStreamer App to the Data Collector

event hubs ⫘

• Microsoft Azure Event Hubs Integration Guide

• Microsoft Azure Active Directory Activity Reports Integration Guide

• Microsoft Azure Activity Log Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Firewall Integration Guide

• Microsoft Azure Front Door Integration Guide

• Microsoft Entra Risk Detection Integration Guide

events ⫘

• Event Details

• Process Trees

• Start and Add to Investigations

• Pivot Search

• Related Alerts and Events Timeline View

• CyberChef

export ⫘

• Data Exports

f5 ⫘

• F5 ASM WAF Integration Guide

• F5 BIG-IP Local Traffic Manager Integration Guide

files ⫘

• File Details

firewall ⫘

• Cisco ASA Integration Guide

• Cisco FTD Firewall Integration Guide

• Palo Alto Firewall Integration Guide

• SonicWall Firewall Integration Guide

• Sophos XG Firewall Integration Guide

• WatchGuard Firewall Integration Guide

forcepoint ⫘

• Forcepoint Web Security

fortinet ⫘

• Fortinet Fortigate Integration Guide

• Fortinet FortiWeb Integration Guide

gcc ⫘

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

gcp ⫘

• Google Cloud Platform (GCP) Collector

get started ⫘

• Log In to Secureworks® Taegis™ XDR

google ⫘

• Google Cloud Platform (GCP) Collector

• Google Cloud Platform Integration Guide

• Google Workspace Integration Guide

guardduty ⫘

• Amazon GuardDuty Integration Guide

host isolation ⫘

• Isolate a Red Cloak™ Endpoint

identity ⫘

• Cisco ISE

• Cisco Duo Integration Guide

imperva ⫘

• Imperva WAF Integration Guide

• Imperva Cloud WAF Integration Guide

infoblox ⫘

• Infoblox Integration Guide

integrations ⫘

• Manage Endpoints

• Add the eStreamer App to the Data Collector

• AWS Data Collector

• Azure Data Collector

• Splunk Heavy Forwarder

• Data Sources

• Google Cloud Platform (GCP) Collector

• Integration Overview

• Manage Cloud API Integrations

• Manage Data Collectors

• On-Premise Automation Connector

• TLS Enabled Syslog

• Find Your AWS Account ID

• AWS ALBLogs Integration Guide

• Amazon GuardDuty Integration Guide

• AWS VPC Flow Logs Integration Guide

• AWS WAF Logs Integration Guide

• Microsoft Azure Activity Log Integration Guide

• Office 365 and Azure Integration Guide

• Permissions Used by Taegis™ XDR for Microsoft 365 and Azure Integrations

• Cisco Umbrella Integration Guide

• AWS CloudTrail Integration Guide

• Mimecast Integration Guide

• Working With Multiple CloudTrail Accounts

• Netskope SSE Integration Guide

• Office 365 and Azure Data Availability

• Okta Integration Guide

• Proofpoint Targeted Attack Protection (TAP) Integration Guide

• Remove Cloud Permissions

• S3 Event Archiving

• Test AWS Lambda Logs

• View AWS Lambda Logs

• Zscaler Integration Guide

• Red Cloak™ Endpoint Agent for VDI or Cloud Instance Deployments

• Carbon Black Response Cloud Integration Guide

• CrowdStrike

• Manage Endpoint Agents

• Linux Servers Integration Guide

• Microsoft Defender for Endpoint Integration Guide

• Microsoft DHCP Integration Guide

• Microsoft DNS Integration Guide

• Microsoft IIS Integration Guide

• Red Cloak™ Endpoint Agent Changelog

• FAQ: Red Cloak™ Endpoint Agent

• Red Cloak™ Endpoint Agent Installation

• Red Cloak™ Endpoint Agent Technical Details

• Red Cloak™ Endpoint Agent Troubleshooting

• Red Cloak™ Endpoint Agent Uninstall

• Red Cloak™ Endpoint Agent Supported Operating Systems and System Requirements

• SentinelOne

• Taegis™ NGAV Agent

• Taegis™ NGAV FAQ

• VMware Carbon Black Cloud Endpoint Standard and Enterprise EDR Integration Guide

• Microsoft Windows Event Log Integration Guide

• Aruba ClearPass Integration Guide

• Barracuda NGFW Integration Guide

• Barracuda WAF Integration Guide

• Symantec (Blue Coat) ProxySG Integration Guide

• Check Point Integration Guide

• Cisco ASA Integration Guide

• Cisco FTD Firewall Integration Guide

• Cisco IOS and NX-OS Integration Guide

• Cisco Ironport Integration Guide

• Cisco ISE

• Cisco Meraki Integration Guide

• Citrix ADC Integration Guide

• Corelight Integration Guide

• Custom Parsers Overview

• Custom Parser Syntax

• Overriding and Extending Global Parsers

• CyberArk

• Darktrace

• F5 ASM WAF Integration Guide

• F5 BIG-IP Local Traffic Manager Integration Guide

• Forcepoint Web Security

• Fortinet Fortigate Integration Guide

• Fortinet FortiWeb Integration Guide

• Imperva WAF Integration Guide

• Infoblox Integration Guide

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Juniper Pulse Secure Integration Guide

• Juniper SRX Firewall Integration Guide

• Lastline Integration Guide

• McAfee Web Gateway Integration Guide

• Palo Alto Firewall Integration Guide

• SCADAfence

• SonicWall Firewall Integration Guide

• Sophos XG Firewall Integration Guide

• Suricata Integration Guide

• Trend Micro Deep Security

• VMware vCenter

• WatchGuard Firewall Integration Guide

• On-Premises HA Data Collector

• On-Premises Data Collector

• Add a Carbon Black Integration

• Sensor Types

• Taegis™ Agent Changelog

• Taegis™ Agent Downloads

• Taegis™ Endpoint Management

• Taegis™ Agent Host Isolation Exceptions

• FAQ: Taegis™ Agent

• Taegis™ Agent Groups

• Taegis™ Agent Installation Information and Prerequisites

• Taegis™ Endpoint Agent Introduction

• Taegis™ Linux Agent Installation

• Taegis™ Linux Agent Troubleshooting

• Taegis™ macOS Agent Installation

• Taegis™ macOS Agent Troubleshooting

• Taegis™ Agent Supported Operating Systems and System Recommendations

• Taegis™ Endpoint Tags

• Taegis™ Agent Technical Details

• Taegis™ Agent Troubleshooting

• Taegis™ Agent Uninstall

• Taegis™ Windows Agent Installation

• Taegis™ Windows Agent Troubleshooting

• AlienVault OTX Integration Guide

• Anomali Integration Guide

• TAXII 2.1 Integration Guide

• Data Source Integration Definitions

• Lambda Migration

• Manage NDR Devices

• Google Cloud Platform Integration Guide

• Google Workspace Integration Guide

• Nozomi Guardian Integration Guide

• Cloudflare

• Cato Networks

• Akamai App and API Protector

• Akamai Enterprise Application Access (EAA) Integration Guide

• Cisco Duo Integration Guide

• Imperva Cloud WAF Integration Guide

• Office 365 Management API Integration Guide

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

• Microsoft Azure Event Hubs Integration Guide

• XDR Custom Data Source Integration

• Microsoft Azure Activity Log Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Firewall Integration Guide

• Microsoft Azure Front Door Integration Guide

• Microsoft Entra Risk Detection Integration Guide

• Microsoft Graph Security Alerts Integration Guide

investigations ⫘

• Alert Triage Dashboard

• Taegis™ ManagedXDR Dashboard

• Close an Investigation

• Start and Add to Investigations

• Work an Investigation

• CyberChef

• Explore an Investigation in Detail with Entity Graph

ISE ⫘

• Cisco ISE

juniper ⫘

• Juniper Pulse Secure Integration Guide

• Juniper SRX Firewall Integration Guide

lambda ⫘

• Test AWS Lambda Logs

• View AWS Lambda Logs

• Lambda Migration

• Add AWS Lambda Trigger

lastline ⫘

• Lastline Integration Guide

linux ⫘

• Linux Servers Integration Guide

log in ⫘

• Log In to Secureworks® Taegis™ XDR

managedxdr ⫘

• Taegis™ ManagedXDR Dashboard

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Secureworks® Taegis™ ManagedXDR

• Proactive Response Actions Overview

• Secureworks® Taegis™ ManagedXDR FAQ

• Onboarding for Taegis™ ManagedXDR

• Cloud Based Proactive Response Example Playbook

• Configuring Proactive Response Actions Using Tags

• Endpoint Proactive Response Example Playbook

• Proactive Response Naming Convention

• Network Proactive Response Example Playbook

managedxdr elite ⫘

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Secureworks® Taegis™ ManagedXDR Elite

• Onboarding for Taegis™ ManagedXDR Elite

mcafee ⫘

• McAfee Web Gateway Integration Guide

mfa ⫘

• Log In to Secureworks® Taegis™ XDR

microsoft ⫘

• Azure Data Collector

• Microsoft Azure Activity Log Integration Guide

• Office 365 and Azure Integration Guide

• Permissions Used by Taegis™ XDR for Microsoft 365 and Azure Integrations

• Office 365 and Azure Data Availability

• Microsoft Defender for Endpoint Integration Guide

• Microsoft DHCP Integration Guide

• Microsoft DNS Integration Guide

• Microsoft IIS Integration Guide

• Microsoft Windows Event Log Integration Guide

• Office 365 Management API Integration Guide

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

• Microsoft Azure Event Hubs Integration Guide

• Microsoft Azure Active Directory Activity Reports Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Firewall Integration Guide

• Microsoft Azure Front Door Integration Guide

• Microsoft Entra Risk Detection Integration Guide

• Microsoft Graph Security Alerts Integration Guide

mimecast ⫘

• Mimecast Integration Guide

mitre att&ck ⫘

• FAQ — Adversary Software Coverage

• Adversary Software Coverage

ndr ⫘

• Manage NDR Devices

• Taegis™ NDR Detectors

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Taegis™ NDR Overview

• Taegis™ NDR Service Description

• Transitioning from CTP to Taegis™ XDR

netskope ⫘

• Netskope SSE Integration Guide

network ⫘

• Aruba ClearPass Integration Guide

• Barracuda NGFW Integration Guide

• Barracuda WAF Integration Guide

• Symantec (Blue Coat) ProxySG Integration Guide

• Check Point Integration Guide

• Cisco ASA Integration Guide

• Cisco FTD Firewall Integration Guide

• Cisco IOS and NX-OS Integration Guide

• Cisco Ironport Integration Guide

• Cisco Meraki Integration Guide

• Citrix ADC Integration Guide

• Corelight Integration Guide

• CyberArk

• Darktrace

• F5 ASM WAF Integration Guide

• F5 BIG-IP Local Traffic Manager Integration Guide

• Fortinet Fortigate Integration Guide

• Fortinet FortiWeb Integration Guide

• Imperva WAF Integration Guide

• Infoblox Integration Guide

• Juniper Pulse Secure Integration Guide

• Juniper SRX Firewall Integration Guide

• Lastline Integration Guide

• McAfee Web Gateway Integration Guide

• Palo Alto Firewall Integration Guide

• SCADAfence

• SonicWall Firewall Integration Guide

• Sophos XG Firewall Integration Guide

• Suricata Integration Guide

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Trend Micro Deep Security

• VMware vCenter

• WatchGuard Firewall Integration Guide

• Zscaler Integration Guide

ngav ⫘

• Taegis™ NGAV Agent

• Taegis™ NGAV FAQ

notifications ⫘

• Notifications

• Profile Settings

nozomi ⫘

• Nozomi Guardian Integration Guide

office 365 ⫘

• Office 365 and Azure Integration Guide

• Permissions Used by Taegis™ XDR for Microsoft 365 and Azure Integrations

• Office 365 and Azure Data Availability

• Office 365 Management API Integration Guide

• Office 365 Management API Government Community Cloud (GCC) Integration Guide

okta ⫘

• Okta Integration Guide

on-premises ⫘

• On-Premise Automation Connector

• On-Premises HA Data Collector

• On-Premises Data Collector

onboarding ⫘

• Onboarding for Taegis™ ManagedXDR Elite

• Onboarding for Taegis™ ManagedXDR

• XDR Onboarding & Enablement Services

• Secureworks Professional Services

ot ⫘

• Nozomi Guardian Integration Guide

palo alto ⫘

• Palo Alto Firewall Integration Guide

password ⫘

• Log In to Secureworks® Taegis™ XDR

playbooks ⫘

• Configured Playbooks

• Automations Overview

• Playbook Templates

• Manage Playbook Template Versions

• Playbooks History

• Playbooks Overview

• Supported Playbooks

policies ⫘

• Log Retention

• Secureworks® Taegis™ Security Posture

• Secureworks® Subprocessors for Taegis™ XDR, ManagedXDR, VDR, and Security Risk Consulting Services

• Copyright

• Taegis™ XDR Data Retention

• Terms and Conditions

• Secureworks® Taegis™ XDR Ask an Expert Support

• Privacy Policy

• Secureworks® Taegis™ XDR Service Level Agreement

• Secureworks® Taegis™ XDR Basic Application Support

• Taegis™ AI Policy

process events ⫘

• Process Trees

• File Details

professional services ⫘

• Secureworks Professional Services

• XDR Onboarding & Enablement Services

• XDR Remote Training

• XDR Custom Data Source Integration

• XDR Customization Services

• XDR Health Check

• XDR API Reporting

profile settings ⫘

• Notifications

• What is XDR Preview?

• Profile Settings

• Access Support PIN

proofpoint ⫘

• Proofpoint Targeted Attack Protection (TAP) Integration Guide

queries ⫘

• Configure Custom Reports

• Common Report Queries

• Pivot Search

• Quick Search

• Saved Searches

• Search History

• Sensor Types

• Advanced Search Builder

• Advanced Search Query Language

query language ⫘

• Configure Custom Reports

• Common Report Queries

• Saved Searches

• Search History

• Sensor Types

• Advanced Search Query Language

red cloak ⫘

• Red Cloak™ Endpoint Agent for VDI or Cloud Instance Deployments

• Manage Endpoint Agents

• Red Cloak™ Endpoint Agent Changelog

• FAQ: Red Cloak™ Endpoint Agent

• Red Cloak™ Endpoint Agent Installation

• Red Cloak™ Endpoint Agent Technical Details

• Red Cloak™ Endpoint Agent Troubleshooting

• Red Cloak™ Endpoint Agent Uninstall

• Red Cloak™ Endpoint Agent Supported Operating Systems and System Requirements

reporting ⫘

• XDR API Reporting

reports ⫘

• Archived Reports

• Completed Reports

• Configure Custom Reports

• Common Report Queries

• Create Reports from a Template

• Scheduled Reports

rules ⫘

• Alert Suppression Rules

• Custom Alert Rules

• Secureworks Professional Services

• XDR Customization Services

s3 ⫘

• S3 Event Archiving

sase ⫘

• Cato Networks

sd-wan ⫘

• Cato Networks

SentinelOne ⫘

• SentinelOne

scadafence ⫘

• SCADAfence

search ⫘

• File Details

• Pivot Search

• Quick Search

• Saved Searches

• Search History

• Sensor Types

• Advanced Search Builder

• Advanced Search Query Language

secureworks ⫘

• Red Cloak™ Endpoint Agent for VDI or Cloud Instance Deployments

• Manage Endpoint Agents

• Red Cloak™ Endpoint Agent Changelog

• FAQ: Red Cloak™ Endpoint Agent

• Red Cloak™ Endpoint Agent Installation

• Red Cloak™ Endpoint Agent Technical Details

• Red Cloak™ Endpoint Agent Troubleshooting

• Red Cloak™ Endpoint Agent Uninstall

• Red Cloak™ Endpoint Agent Supported Operating Systems and System Requirements

• On-Premises HA Data Collector

• On-Premises Data Collector

• Taegis™ NDR Detectors

• Taegis™ NDR Integration Guide - Physical

• Taegis™ NDR Integration Guide - Virtual

• Taegis™ Agent Changelog

• Taegis™ Agent Downloads

• Taegis™ Endpoint Management

• Taegis™ Agent Host Isolation Exceptions

• FAQ: Taegis™ Agent

• Taegis™ Agent Groups

• Taegis™ Agent Installation Information and Prerequisites

• Taegis™ Endpoint Agent Introduction

• Taegis™ Linux Agent Installation

• Taegis™ Linux Agent Troubleshooting

• Taegis™ macOS Agent Installation

• Taegis™ macOS Agent Troubleshooting

• Taegis™ Agent Supported Operating Systems and System Recommendations

• Taegis™ Endpoint Tags

• Taegis™ Agent Technical Details

• Taegis™ Agent Troubleshooting

• Taegis™ Agent Uninstall

• Taegis™ Windows Agent Installation

• Taegis™ Windows Agent Troubleshooting

service descriptions ⫘

• Taegis™ NDR Service Description

• Secureworks® Taegis™ ManagedXDR Elite

• Secureworks® Taegis™ ManagedXDR

sonicwall ⫘

• SonicWall Firewall Integration Guide

sophos ⫘

• Sophos XG Firewall Integration Guide

splunk ⫘

• Splunk Heavy Forwarder

sse ⫘

• Cloudflare
• Cato Networks

support ⫘

• Browser Requirements

• Chat Support

• Access Support PIN

• Secureworks® Taegis™ XDR Ask an Expert Support

• Secureworks® Taegis™ XDR Basic Application Support

• Manage Subscriptions

• Taegis™ AI Policy

suricata ⫘

• Suricata Integration Guide

symantec ⫘

• Symantec (Blue Coat) ProxySG Integration Guide

taegis ⫘

• Taegis™ NGAV Agent

• Taegis™ NGAV FAQ

taegis agent ⫘

• Manage Endpoint Agents

• Taegis™ Agent Changelog

• Taegis™ Agent Downloads

• Taegis™ Endpoint Management

• Taegis™ Agent Host Isolation Exceptions

• FAQ: Taegis™ Agent

• Taegis™ Agent Groups

• Taegis™ Agent Installation Information and Prerequisites

• Taegis™ Endpoint Agent Introduction

• Taegis™ Linux Agent Installation

• Taegis™ Linux Agent Troubleshooting

• Taegis™ macOS Agent Installation

• Taegis™ macOS Agent Troubleshooting

• Taegis™ Agent Supported Operating Systems and System Recommendations

• Taegis™ Endpoint Tags

• Taegis™ Agent Technical Details

• Taegis™ Agent Troubleshooting

• Taegis™ Agent Uninstall

• Taegis™ Windows Agent Installation

• Taegis™ Windows Agent Troubleshooting

taxii ⫘

• TAXII 2.1 Integration Guide

telemetry ⫘

• Integration Overview

tenant settings ⫘

• Audit Logs

• Data Usage

• Manage Subscriptions

threat intelligence ⫘

• Security Posture Dashboard

• Threat Intelligence Alert Enrichment

• Threat Intelligence Overview

• Threat Intelligence Reports

• Secureworks Threat Groups

• AlienVault OTX Integration Guide

• Anomali Integration Guide

• TAXII 2.1 Integration Guide

threat score ⫘

• Threat Score

tls syslog ⫘

• TLS Enabled Syslog

tools ⫘

• CyberChef

training ⫘

• Secureworks Professional Services

• XDR Remote Training

trend micro ⫘

• Trend Micro Deep Security

user management ⫘

• Custom Roles

• Manage Users

• User Roles

• Audit Logs

vcenter ⫘

• VMware vCenter

vmware ⫘

• Carbon Black Response Cloud Integration Guide

• CrowdStrike

• VMware Carbon Black Cloud Endpoint Standard and Enterprise EDR Integration Guide

• VMware vCenter

• Add a Carbon Black Integration

vpc ⫘

• AWS VPC Flow Logs Integration Guide

vulnerabilities ⫘

• Vulnerability Management

waf ⫘

• AWS WAF Logs Integration Guide

• F5 ASM WAF Integration Guide

• Imperva WAF Integration Guide

• Imperva Cloud WAF Integration Guide

• Microsoft Azure Application Gateway Integration Guide

• Microsoft Azure Front Door Integration Guide

watchguard ⫘

• WatchGuard Firewall Integration Guide

web security ⫘

• Forcepoint Web Security

widgets ⫘

• Alert Triage Dashboard

• Taegis™ ManagedXDR Dashboard

• My Dashboards

• Security Posture Dashboard

• Threat Intelligence Reports

zscaler ⫘

• Zscaler Integration Guide