Skip to main content
Symantec Endpoint Protection 14 app icon

Symantec Endpoint Protection 14

Integrate with Symantec Endpoint Protection 14 to execute investigative, containment, and corrective actionsBuilt by Splunk LLC
soar product badge
Default Version 2.0.6

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#3 in Endpoint

Integrate with Symantec Endpoint Protection 14 to execute investigative, containment, and corrective actions

Supported actions

  • test connectivity: Validate credentials provided for connectivity
  • list domains: List all of the administrative domains configured on the device
  • list groups: List all of the administrative groups configured on the device
  • list endpoints: List all the endpoints/sensors configured on the device
  • get system info: Gets the information about the computers in a specified domain
  • get status: Get command status report
  • unquarantine device: Unquarantine the endpoint
  • quarantine device: Quarantine the endpoint
  • unblock hash: Unblock hashes on endpoints
  • block hash: Block hashes on endpoints
  • scan endpoint: Scan an endpoint