Trend Vision One - Remove IOC from Suspicious Object List
Details
This workflow appears in the pivot menu and allows a user to remove an IOC from the suspicious object list in Trend Vision One.
Description
This workflow appears in the pivot menu and allows a user to remove an IOC from the suspicious object list in Trend Vision One. Supported observables: SHA-1, SHA-256, URL, domain, IP address, email
Target: Trend Vision One - v3.0
Steps:
- Determine which observable type was provided
- If the type is not supported, end the workflow
- Request the IOC be removed from the suspicious object list
Required targets
This workflow requires the following targets to be available before it can be run.
Integration targets
- Trend Vision One
About
Author
Cisco
Version
v1.1
Intent
Pivot Menu
Integration
Average rating
No ratings yet
Authorship
Cisco Managed
Contact and support information
External links
Related workflows
Cisco Managed
This workflow appears in the pivot menu and allows a user to add an IOC to the suspicious object list in Trend Vision One.
Cisco Managed
This workflow appears in the pivot menu and allows a user to isolate an endpoint in Trend Vision One.
Cisco Managed
This workflow appears in the pivot menu and allows a user to remove an endpoint from isolation in Trend Vision One.
Cisco Managed
This workflow appears in the pivot menu and allows a user to remove an IOC from the suspicious object list in Trend Vision One.