McAfee Threat Intelligence Exchange Content Pack

Overview

McAfee Threat Intelligence Exchange (TIE) provides a framework personalized to your environment where your security products collectively pinpoint threats and act as a unified threat defense system. Take advantage of this rich source of data to visually discover, track, and report on events specific to your environment from the McAfee Enterprise Security Manager console.

Content Pack Components

Alarms
  • TIE – Bad File Threshold
  • TIE – Malicious File Found
Reports

A summary of McAfee TIE events that have been collected.

  • TIE – Daily Overview
Views
  • TIE View
  • TIE Malicious File Watchlist View
Watchlists

Holds a list of all the file hashes found.

  • TIE – Malicious Files Found
Correlation Rules

Discover McAfee TIE events that may be in the environment.

  • TIE - GTI Reputation Changed from Clean to Dirty
  • TIE - GTI Reputation Changed from Dirty to Clean
  • TIE - Malicious File SHA-1 Found on Increasing Number of Hosts
  • TIE - Increase in Malicious Files Found Across All Hosts
  • TIE - Malicious Filename Found on Increasing Number of Hosts
  • TIE - Multiple Malicious File Found on Single Host
  • TIE - TIE Reputation Changed from Clean to Dirty
  • TIE - TIE Reputation Changed from Dirty to Clean

Required Products

Download Content Pack

Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.

Read Article

Explore

Find other content packs and partner integrations.

See All

Free Trial

Interested in McAfee Enterprise Security Manager?

Register for Free Trial