IncMan
ArchivedIncMan sends notifications of the triggered alert incidents to the DFLabs’ IncMan server in CEF data format. The DFLabs’ IncMan server is a security automation platform that automates, orchestrates, and measures security operations, threat management, and incident response.
Package Details
- Alertnotifications
- IncManNotification
- K b list
- ADMINS
- CLOUD_APPLICATIONS
- HOMENET
- IRC_PORTS
- KNOWN_DOMAINS
- MAIL_SERVER_IP
- MAIL_SERVERS
- MALWARE_EMAILS
- MALWARE_FILES
- MALWARE_HASH
- MALWARE_IP
- MALWARE_URL
- RESIGNED_EMPLOYEES
- Alerts
- LP_Malware Threat Affected Host
- LP_Malware Threat Connection from Malicious Source
- LP_Malware Threat Connection to Malicious Destination
- LP_Malware Threat Connection to Malicious URLs
- LP_Malware Threat Emails Sent to Attacker
- LP_Possible Account Misuse-Abnormal Login
- LP_Possible Account Misuse-Multiple Logon
- LP_Possible Account Misuse-Privilege Escalation
- LP_Possible Botnet Connection- DNS Query
- LP_Possible Botnet Connection-DNS Server Modified
- LP_Possible Botnet Connection-IRC Port
- LP_Possible Botnet Connection-Outbound DDOS
- LP_Possible Botnet Connection-Outbound Spam
- LP_Possible DDOS Attack
- LP_Possible Data Breach
- LP_Possible Data Breach-Off Hour Transfer
- LP_Possible Inbound Spamming Detected
- LP_Possible Insider Threat
- LP_Possible Intrusion Detected
- LP_Possible Malicious Communication-Inbound
- LP_Possible Malicious Communication-Outbound
- LP_Possible Malware Detected
- LP_Possible Outbound Spamming Detected
- LP_Possible Phishing Detected
- LP_Possible Port Scan Detected-Inbound
- LP_Possible Port Scan Detected-Internal
- LP_Possible Scan and Probe
- LP_Possible Unauthorized Access
- LP_Possible WebApp Attack
Enhancement
PLUG-11610
IncMan is now compatible with Logpoint v7.5.0.
Installation
Follow these steps to install the IncMan v5.0.0 application:
- Download the IncMan_5.0.0.zip file provided in the Download section above.
- Extract the zip file to obtain the IncMan_5.0.0.pak file.
- Install the application by importing the pak file to LogPoint under Settings >> System >> Applications.
Past Release
IncMan v5.0.0 ▾
Enhancement
The application has been updated to comply with LogPoint v6.7.0.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.