Skip to main content

Incident ResponderIncident Responder Documentation

Incident Responder Services

Integrate Incident Responder with a service to run actions and playbooks.

A service is a third-party product or vendor you integrate with Incident Responder to run actions and playbooks. This service is usually one your organization already uses, like Cisco Threatgrid or Palo Alto Networks Wildfire. Instead of leaving Incident Responder to use these services, integrate them so you access them in one location.

You configure each service differently. Once you configure a service, you can edit or disable it.Configure ServicesConfigure ServicesEdit a ServiceDisable a Service

If you don't want to purchase additional services from third parties, you can use Exabeam's in-house service, Exabeam Actions. It is free to use and available out of the box. You can also upload a custom service. This custom service can be one you developed from scratch or one that customizes an out-of-the-box third-party service.Upload a Custom ServiceUpload a Custom Service

If you use a third-party service we don't yet support, contact your Sales Representative to request it.