Vectra
Vectra is a network detection and response (NDR) and extended detection and response (XDR) platform that uses artificial intelligence and machine learning to detect, investigate, and respond to cybersecurity threats across enterprise networks, cloud environments, and SaaS applications. The platform provides continuous monitoring and threat detection capabilities to identify attackers and malicious behavior in real-time.
| Category | NDR |
| Direction | Query source |
| Sign-in | None |
| Query languages | STIX |
| Website | vectra.ai |
Before you start
The setup page can't take credentials for Vectra yet. Create the connection, then contact Huntbase support to finish signing it in.
For the vendor's own instructions, see Vectra API token quick start.
Connect Vectra
- Go to Connections and click New connection, or click New connection on the Vectra product page.
- On Product, pick Vectra and choose the Owner.
- On Details, give the connection a Name and, optionally, a Description.
- On Connect, fill in the settings and credentials described below.
- On Verify, review the summary and click Create & check.
For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.
Settings
Where your Vectra lives:
| Field | Required | Notes |
|---|---|---|
| Server Address | Yes | The hostname or IP address of your Vectra Brain. |
| Port | Yes | Set the port number that is associated with the hostname or IP address. Defaults to 443. |
Query it
Once connected, Vectra can serve these languages in a query tab, and Scout can use it when you ask in Auto:
| Language | Use it for |
|---|---|
| STIX | STIX patterns for indicator sweeps, translated into the product's native search. |
Next steps
- Connections — health, credentials and settings after you connect
- Query languages — syntax, parameters and time ranges
- Chatting with Scout — ask questions without writing a query
- All integrations — the rest of the catalog