Popular Articles

  1. MSV Director Install: Before You Begin

    Before installing your Director, we've provided a checklist that covers prerequisites. This way, you are positive you've made all the required decisions and captured the required information before you start the installation.  Installation Workflo...
  2. Security Validation Component Requirements Overview

    The following tables describe the system requirements for the Validation Platform components. See the respective pages for full details. Linux Actors Linux Actors can be installed as Network Actors or Endpoint Actors . ...
  3. Mandiant Threat Defense

    is a threat detection, investigation and response service that combines the expertise of Mandiant's frontline security analysts and to help organizations protect against cyber threats. The service includes: Active threat detection : con...
  4. Federated access for the Managed Defense Portal

    The Portal can be integrated with other identity providers for authentication. There are two main types of federation: identity provider (IdP) initiated and service provider (SP) initiated. The Portal supports IdP initiated sign in. An in...
  5. ASM AWS Integration

    This integration is not currently supported for AWS GovCloud (US) users. To provide a more thorough view of your inventory, can integrate with Amazon Web Services (AWS) to retrieve the following: Public EC2 instances  S3 buckets...
  6. Lucene Queries in DTM

    Apache Lucene is the accepted standard in the text searching technology space and is relatively well known. On the surface, the syntax looks simple, but using it correctly often requires careful consideration. Lucene queries are used in in...
  7. ASM Issue Severity Definitions and Examples

    This document describes how determines the severity ratings for Issues. Confidence Level of Issues uses triage categories to determine whether an Issue needs further investigation or is ready for review. Confirmed : has high ...
  8. Reviewing Entities

    An Entity is an external asset belonging to an organization such as a domain name, email address, or URL. Every Entity that is found serves as a pivot point for additional data gathering.  For a list of available Entities in , see Entity types . ...
  9. Security Technologies that Managed Defense Supports

    The following tables list the supported security technologies, required Google Security Operations parsers, and supported alert types from each vendor that are processed as part of providing security event monitoring and threat hunting services....
  10. Use Cases: Applying Threat Intelligence

    Beyond Mandiant Intelligence Subscriptions Purchasing a Mandiant Advantage Intelligence subscription gives you world-leading intelligence at your fingertips. Maximizing this intelligence requires clear processes and effective application. Our ...