Details

This workflow appears in the pivot menu and allows a user to add a device to the ExtraHop watchlist.

Description

This workflow appears in the pivot menu and allows a user to add a device to the ExtraHop watchlist. Supported observables: hostname, IP address, MAC address

Target: ExtraHop Reveal(x) 360 - v1

Steps:

  • Determine which observable type was provided
  • Search for matching devices
  • Check if a device was found:
    • If a device was found, add it to the watchlist
Required targets

This workflow requires the following targets to be available before it can be run.

Integration targets

  • ExtraHop Reveal(x) 360
About
Author
Cisco
Version
v1.0
Intent
Pivot Menu
Average rating
No ratings yet
Authorship
Cisco Managed
Contact and support information
External links
Related workflows
Cisco Managed
This workflow appears in the pivot menu and allows a user to add a device to the ExtraHop watchlist.
Cisco Managed
This workflow appears in the pivot menu and allows a user to remove a device from the ExtraHop watchlist.