Archer Integration
Administrators can integrate NetWitness with Archer Cyber Incident & Breach Response to send alerts and incidents from NetWitness to Archer for incident management and remediation. This guide provides a high-level workflow for configuring this integration.
Note: When you upgrade from Security Analytics to NetWitness, the Archer Cyber Incident & Breach Response integration is no valid and must be re-configured.
The following table list the NetWitness integration options with Archer Cyber Incident & Breach Response Version 1.3.1.2.
| Archer Cyber Incident & Breach ResponseVersion | NetWitness Integration | Reference |
|---|---|---|
| 1.3.1.2 | ESA Correlation |
See "Configure ESA Correlation for Integration with Archer Cyber Incident & Breach Response" section. |
| 1.3.1.2 | Reporting Engine (RE) | See "Configure Reporting Engine for Integration with Archer Cyber Incident & Breach Response" section. |
| 1.3.1.2 | Respond |
See "Configure Respond for Integration with Archer Cyber Incident & Breach Response 1.3.1.2" section. |
| 1.3.1.2 | Archer Feeds | See "Archer Feeds" section. |
