Splunk SOAR integration (QUX)

Install and configure the Splunk SOAR app for QUX, including assets, actions, playbooks, and troubleshooting.

Contains

• Introduction

  • Document and Release Information
• Terminology
• Architecture
• Implementation

  • Vectra Pre-requisites
  • Splunk Pre-requisites
  • Downloading and Installing the App
  • Implementation Checklist
  • Initial Configuration of New Asset
• Operational Components

  • Events
  • Artifacts
  • Attributes
  • Actions
  • Playbooks
• Operations

  • Incident Creation Philosophy
  • Orientation
  • Workflow
  • Running Actions - General
  • Running Actions - Resolve Assignment
• Working with Playbooks
• Known Limitations
• Troubleshooting
• Worldwide Support Contact Information

Attachments

Splunk SOAR Integration Guide for Vectra NDR.pdf

PDF · 2MB

Open