Cisco Threat Response

Cisco Threat Response app for Phantom provides actions allowing users to query Cisco Threat Response for verdicts and context on observables within a Phantom instance

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• context query: Query Threat Response for Context
• verdict query: Query Threat Response for Verdict