Connect

Connect

McAfee MVISION IOCs

McAfee MVISION IOCs

with your entire stack through Mindflow

with your entire stack through Mindflow

Introducing the MVISION - IOCs agent, a domain expert designed exclusively to interact with Trellix MVISION - IOCs API operations. This agent autonomously sequences calls such as retrieving specific IOC objects, exploring the relationships between IOCs and campaigns, and obtaining detailed campaign data linked to an IOC without manual intervention. For example, it can fetch an IOC object to assess its threat attributes by calling get /insights/v2/iocs/{id}, analyze associated campaigns using get /insights/v2/iocs/{id}/campaigns, and map complex IOC-to-campaign relationships by executing get /insights/v2/iocs/{id}/relationships/campaigns, all precisely tailored to Trellix’s data model and not replicable by other McAfee portfolio services.