-
Once you have the host image added to the Protected Theater, you can install the Protected Actor. This process involves three steps: Adding the Protected Actor configuration to the Director. Installing the Protected Actor executable on the targ...
-
Last Updated: 08/22/2022
in Threat Intelligence Beyond Mandiant Intelligence Subscriptions Purchasing a Mandiant Advantage Intelligence subscription gives you world-leading intelligence at your fingertips. Maximizing this intelligence requires clear processes and effective application. Our ...
-
Overview You view and create Actions by going to Library > Actions . By default, the Validation Platform contains a large selection of Actions that are categorized by Filters and Dimensions. Refer to Security Content Filters and Dimensions f...
-
-
Threat intelligence is often difficult to leverage in practice due to the high level of noise and lack of coverage provided by most feeds. A typical organization has to purchase multiple subscriptions and develop ad-hoc methods to evaluate and clean...
-
After the Director is installed and you've signed in for the first time, we recommend that you complete some initial configurations. This includes, but is not limited to, the following: Configuring DNS Settings Managing NTP Servers Settings ...
-
An inferred vulnerability, or CVE, is a vulnerability identified through a passive check that recognizes a technology known to have a vulnerability associated with it. From the Entities page , you can find CVEs in the following ways: For...
-
Using outbound integrations, pushes Entities and Issues to various security operations or notification tools. The following outbound integrations are supported. Ticketing Integrations Jira
ServiceNow SIEM Integrations Chronicle S...
-
Collections within define the scope, type of data, and discovery task workflows perform. Access control can be configured at the Collection, Project, and Organization level in . If you have requirements around controlling access, make sure to take...
-
If you meet the prerequisites, you can use Bulk Registration Tokens to install and register your Actor.
Prerequisites for Security Validation
You have configured / deployed the operating system
Your Actor does not need a proxy for ...