Solutions

A repository of open source and commercial solutions that have been developed for use with the Data Exchange Layer (DXL) fabric.

  1. MISP MAR

    • mohl1
    This Integration adds automated hunting capabilities to the MISP platform with McAfee Active Response.
    • 1.2k Downloads
    • 0 Comments

  2. Node-RED Flow: AD Computer and ePO System Compare

    • jnetz
    This flow pulls all systems from ePO and creates a set difference with all systems from AD.
    • 740 Downloads
    • 0 Comments

  3. Node-RED Flow: Add Hash Sightings to MISP Event using MAR

    • chrissmith
    This flow utilizes McAfee Active Response (MAR) to adds sightings to MISP published events containing hash-based attributes.
    • 789 Downloads
    • 0 Comments

  4. Node-RED Flow: Apply FireEye file reputation to McAfee TIE

    • brumleyscott
    Allows FireEye appliances to send file reputation to McAfee TIE over the DXL.
    • 767 Downloads
    • 0 Comments

  5. Node-RED Flow: Apply Tag to System in ePO via DXL

    • mcafee
    Invokes the ePO "system.applyTag" remote command via DXL
    • 761 Downloads
    • 0 Comments

  6. Node-RED Flow: Clear Tag from System in ePO via DXL

    • mcafee
    Invokes the ePO "system.clearTag" remote command via DXL
    • 710 Downloads
    • 0 Comments

  7. Node-RED Flow: Create ePO Threat Event via DXL

    • mcafee
    Invokes an ePO remote command via DXL to create a threat event
    • 691 Downloads
    • 0 Comments

  8. Node-RED Flow: Find System in ePO via DXL

    • mcafee
    Invokes the ePO "system.find" remote command via DXL
    • 774 Downloads
    • 0 Comments

  9. Node-RED Flow: Get TIE Certificate Reputation via DXL

    • mcafee
    Retrieves reputation of a certificate from TIE
    • 761 Downloads
    • 0 Comments

  10. Node-RED Flow: Get TIE File Reputation via DXL

    • mcafee
    Retrieves the reputation of a file from TIE
    • 694 Downloads
    • 0 Comments

  11. Node-RED Flow: Invoke ePO Remote Command via DXL

    • mcafee
    Invokes the ePO "system.findTag" remote command via DXL
    • 792 Downloads
    • 0 Comments

  12. Node-RED Flow: Receive ePO Threat Event via DXL

    • mcafee
    Receives threat events from ePO via DXL
    • 674 Downloads
    • 0 Comments

  13. Node-RED Flow: Search for IP Addresses of MAR Clients via DXL

    • mcafee
    Executes a MAR search for IP addresses of hosts having MAR client installed
    • 681 Downloads
    • 0 Comments

  14. Node-RED Flow: Search for Running Processes on MAR Clients via DXL

    • mcafee
    Executes a MAR search for running processes on hosts having MAR client installed
    • 677 Downloads
    • 0 Comments