cancel
Showing results for 
Search instead for 
Did you mean: 

McAfee SIEM- script to check srcIP reputation

Hi guys,

I'd like to know how to configure an action to the SIEM in order to check the source IP's reputation viaDomain Whois Lookup, Whois API & DNS Data Research - DomainTools.

Thanks,

1 Reply

Re: McAfee SIEM- script to check srcIP reputation

Scott Taschler has a pretty good write up on it.

https://community.mcafee.com/docs/DOC-6223?sr=stream&ru=37835