Cisco Secure Endpoint

OverviewResources

After Cisco^® Secure Endpoint is configured to deliver events to EventTracker Manager, then the alerts, dashboards, and reports can be configured into EventTracker.

Security

Alerts

Cisco Secure Endpoint - Scan Completed with Detections– This alert generates when any threat is detected while scanning.
Cisco Secure Endpoint - Suspicious Activity Detected – This alert generates when any suspicious activity like application launched a shell, suspicious connection detected, etc. occurs.
Cisco Secure Endpoint - Threat Detected - This alert generates when any threat is detected, or malware is executed.

Reports

Cisco Secure Endpoint - Threat detected and quarantine details: This report gives information about all the threats detected, quarantine threats, quarantine failed, and malware executed.
Cisco Secure Endpoint - Vulnerable application and fault detected: This report gives information about all the vulnerable applications that are detected at the endpoints along with the critical faults raised or cleared details.
Cisco Secure Endpoint - Suspicious activity detected: This report gives information about all the suspicious activities like application launched a shell, suspicious connection detected, and more.

Operation

Reports

Cisco Secure Endpoint - Scan detail: This report gives information about all the scan details such as scan started, scan completed along with threat detections and scan failures.
Cisco Secure Endpoint - File activity: This report gives information about all the file activity details such as remote file fetching requested and request failed activity details.
Cisco Secure Endpoint - System activity: This report gives information about all the system and policy update, create, and delete details.

Scope

The configuration details are consistent with EventTracker version 9.3 and later, and Cisco® Secure Endpoint.

Documentation

To configure Cisco® Secure Endpoint to send logs to EventTracker, refer to the How-to Guide.

For more information, please refer to the Integration guide.