Getting started with Recall

Prerequisites and first steps to start using Recall in Quadrant UX.

Recall deployments are a two step process where a Recall Stack is created by Vectra. Recall stack information is provided by Product Support. Then Recall forwarding is enabled on the Brain.

All access to Recall is achieved from the Detect UI. When looking at detections, hosts, accounts, etc. on the Detect UI, select the link Investigate in Cognito Recall to access Recall data. This will navigate to the Recall UI and access the data that is being investigated.

Firewall requirements:

• TCP Port 443 egress from Recall users to <https://kibana.XXXXXX.recall.vectra.ai>

• TCP Port 443 egress from Vectra Brain to <https://collector.XXXXXXX.recall.vectra.ai>

  • The XXXXXX portion will be replaced with a stack URL. You will receive an email from Vectra Support once the stack is created.

Attachments

979KB

Getting-Started-With-Cognito-Recall.pdf

PDF

Open