Explore OpenCTI or OpenAEV platform with 30 days Free Trial!
XTM Hub by FiligranSign In
Trellix TIE logo

Trellix TIE

Automatic deploy
Endpoint Detection And Response
Detection & Response Enablement

Overview

Push OpenCTI file-hash indicators to Trellix TIE reputations over OpenDXL.

The OpenCTI Trellix TIE stream connector pushes OpenCTI file-hash indicators to Trellix Threat Intelligence Exchange (TIE) as enterprise file reputations over the OpenDXL fabric. On each indicator create/update carrying a STIX file-hash pattern, it sets the TIE reputation (configurable trust level) for the MD5/SHA-1/SHA-256 hashes via the OpenDXL TIE client, so Trellix endpoint security can act on the intelligence. This is the standard McAfee/Trellix integration mechanism (Trellix EDR has no outbound IOC REST API). It requires an ePO-provisioned OpenDXL configuration (broker list + client certificate) and covers file/cert hashes only.

Basic information

Trellix TIE
Connectors
Stream
7.260706.0
0

    Cookie settings

    We use cookies to make the XTM Hub work, understand how it's used, and improve your experience. Strictly necessary cookies are always on. With your consent, we also use optional cookies for functionality, performance and analytics, and marketing. You can accept all, reject all, or choose which optional cookies to allow. You can change your preferences at any time via "Cookie settings". See our Cookie Policy for more information.