Skip to main content
Warning
This app is archived. App archiving documentation
McAfee ESM app icon

McAfee ESM

This app integrates with an instance of McAfee ESM to perform investigative and ingestion actionsBuilt by SOAR Community
soar product badge
Default Version 3.0.0

February 24, 2022

Compatibility

SOAR On-Prem

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1, 5.2, 5.1

Rating
0
(0)

Log in to rate this app

Support
Archived Connector
Ranking

#27 in SIEM

This app integrates with an instance of McAfee ESM to perform investigative and ingestion actions

Supported actions

  • test connectivity: Validates the credentials
  • list fields: List the fields available to be used in filters
  • on poll: Ingest Events or Alarms from ESM
  • list watchlists: List the watchlists configured in ESM
  • get events: Get the events associated with a correlated event ID
  • get watchlist: Get the details for a specific watchlist and the values in that watchlist as configured in the ESM
  • update watchlist: Add an entry to a specific watchlist as configured in the ESM