Archer Integration

Administrators can integrate NetWitness with Archer Cyber Incident & Breach Response to send alerts and incidents from NetWitness to Archer for incident management and remediation. This guide provides a high-level workflow for configuring this integration.

Note: When you upgrade from Security Analytics to NetWitness, the Archer Cyber Incident & Breach Response integration is no valid and must be re-configured.

The following table list the NetWitness  integration options with Archer Cyber Incident & Breach Response Version 1.3.1.2.

Archer Cyber Incident & Breach ResponseVersion NetWitness  Integration Reference
1.3.1.2 ESA Correlation

See "Configure ESA Correlation for Integration with Archer Cyber Incident & Breach Response" section.

1.3.1.2 Reporting Engine (RE) See "Configure Reporting Engine for Integration with Archer Cyber Incident & Breach Response" section.
1.3.1.2 Respond

See "Configure Respond for Integration with Archer Cyber Incident & Breach Response 1.3.1.2" section.

1.3.1.2 Archer Feeds See "Archer Feeds" section.