McAfee Threat Intelligence Exchange Content Pack

Alarms

• TIE – Bad File Threshold
• TIE – Malicious File Found

Reports

A summary of McAfee TIE events that have been collected.

• TIE – Daily Overview

Views

• TIE View
• TIE Malicious File Watchlist View

Watchlists

Holds a list of all the file hashes found.

• TIE – Malicious Files Found

Correlation Rules

Discover McAfee TIE events that may be in the environment.

• TIE - GTI Reputation Changed from Clean to Dirty
• TIE - GTI Reputation Changed from Dirty to Clean
• TIE - Malicious File SHA-1 Found on Increasing Number of Hosts
• TIE - Increase in Malicious Files Found Across All Hosts
• TIE - Malicious Filename Found on Increasing Number of Hosts
• TIE - Multiple Malicious File Found on Single Host
• TIE - TIE Reputation Changed from Clean to Dirty
• TIE - TIE Reputation Changed from Dirty to Clean