LogoLogo
⌘Ctrlk
  • Documentation
  • Release Notes
  • API Reference
  • Help Center
AI Assistant

I'm here to help you with the docs.

⌘Ctrli
AI Based on your context
LogoLogo
  • 🏠Welcome
    • Getting started
    • IDR for Azure AD & CDR for M365
    • CDR for AWS
    • CDR for Azure
    • NDR physical appliances
    • NDR virtual / cloud appliances
    • NDR Traffic engineering and validation
    • Match
    • Stream
    • Recall (QUX only)
    • Appliance operations
    • Deprecated / Retired
    • Navigation updates in the Vectra UI
    • ACCESS
    • COVERAGE
    • RESPONSE
    • SETUP
    • TUNING
    • QUX specific
    • Response
    • SOAR
    • ITSM
    • Coverage
    • Context
      • AWS (IaaS)
      • Azure (IaaS)
      • CrowdStrike
      • CrowdStrike EDR process correlation
      • Cybereason
      • Endace
      • GCP (IaaS)
      • Microsoft Active Directory
      • Microsoft Defender for Endpoint
      • Microsoft Defender EDR process correlation
      • SentinelOne
      • Trellix (FireEye)
      • VMware Carbon Black Cloud Endpoint
      • VMware Carbon Black Response
      • VMware vCenter
      • Zscaler Private Access
    • SIEM
    • Access / Authentication
    • Notifications / Data Export
    • Analyst Guidance
    • Backup / Restore / DR
    • Dashboards and Reports
    • Detection specific guidance
    • Exposure
    • General
    • Event Search (Investigate)
    • Licensing
    • Updates
    • AI and ML terminology
    • Vectra AI prioritization and scoring factors
    • Appliance support and EOS / EOL policy
    • Bandwidth used between Sensor and Brain
    • How detection PCAPs are generated
    • In-App support
    • Metadata attributes
    • Product Security
    • RSPAN and ERSPAN support
    • Host ID best practices and functionality
    • Vectra's coverage of MITRE ATT&CK and D3FEND
    • Vectra UI supported browsers
    • Why is metadata sharing important
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. Documentation
  2. Integrations

Context

Context integration resources for enriching Vectra AI entities and detections with external platform details.

AWS (IaaS)Azure (IaaS)CrowdStrikeCrowdStrike EDR process correlationCybereasonEndaceGCP (IaaS)Microsoft Active DirectoryMicrosoft Defender for EndpointMicrosoft Defender EDR process correlationSentinelOneTrellix (FireEye)VMware Carbon Black Cloud EndpointVMware Carbon Black ResponseVMware vCenterZscaler Private Access
PreviousHoneypot Monitoring
NextCrowdStrike EDR process correlation

Last updated 3 months ago

Was this helpful?

LogoLogo
linkedinx-twitterfacebookyoutubeinstagramreddit

© 2026 Vectra AI, Inc. All rights reserved.

Was this helpful?