Add-On for Lacework Alerts

This is a CIM compliant TA for ingesting and search Lacework Alerts via the native Lacework HEC Integration. This TA includes index / ingest time sourcetyping of HEC based events and maps them to relevant fields to support native ES compatibility.

Built by

Last Updated

June 28, 2023

Compatibility

This app has no available versions

Rating

0

(0)

Log in to rate this app

Support

Developer Supported addon

This is a CIM compliant TA for ingesting and search Lacework Alerts via the native Lacework HEC Integration. This TA includes index / ingest time sourcetyping of HEC based events and maps them to relevant fields to support native ES compatibility.