Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-On
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-On
Cisco Secure Endpoint (formerly AMP for endpoints) CIM Add-on provides a mechanism to map data from the Cisco AMP for Endpoints Event Input App for CIM compliant applications. The add-on also provides additional workflow actions so security analysts can go straight from Splunk Events to the Cisco AMP for Endpoints console.