Platform
- TECHNOLOGY
  The Rapid7 Command Platform
  AI-Powered Cybersecurity Platform
  Start Trial
Products
- NEW!
  Surface Command
  Unlock a continuous 360° view of your attack surface
  FREE TRIAL
- DETECTION & RESPONSE
- Next-Gen SIEM
  INSIGHTIDR
- Threat Intelligence
  THREAT COMMAND
Services
- MXDR
  Managed Threat Complete
  24x7 MXDR to secure your extended ecosystem
  Request Demo
- DETECTION & RESPONSE
- Managed XDR
  MANAGED THREAT COMPLETE
- Incident Response Services
  EXPERIENCING A BREACH?
Resources
- NEW
  The Take Command Summit is back!
  Our largest virtual event returns Apr. 9
  Register
Company
Partners
Sign In

Threat Command

Platform
- TECHNOLOGY
  The Rapid7 Command Platform
  AI-Powered Cybersecurity Platform
  Start Trial
Products
- NEW!
  Surface Command
  Unlock a continuous 360° view of your attack surface
  FREE TRIAL
- DETECTION & RESPONSE
- Next-Gen SIEM
  INSIGHTIDR
- Threat Intelligence
  THREAT COMMAND
Services
- MXDR
  Managed Threat Complete
  24x7 MXDR to secure your extended ecosystem
  Request Demo
- DETECTION & RESPONSE
- Managed XDR
  MANAGED THREAT COMPLETE
- Incident Response Services
  EXPERIENCING A BREACH?
Resources
- NEW
  The Take Command Summit is back!
  Our largest virtual event returns Apr. 9
  Register
Company
Partners

Sign In

Documentation
Threat Command
Release Notes

Docs Menu

Welcome

Welcome to Threat Command
Register to Threat Command
Log in to Threat Command
Multi Tenant Threat Management
Rapid7 Product Connections
Customer Support

Threat Command

Threat Command
Architecture Overview
Threat Command Quick Start
Threat Summary
Manage Alerts
Remediate an Alert
Threats
Strategic Intelligence
IntelliFind
Create Reports
Configure Assets
- Asset Types and Formats
- Alerts from Assets
Asset Management
Configurations

Intelligence Hub

Overview
Quick Start
IOC Summary
IOCs
Investigation
- View Investigation Map and Overview
- View Investigation Additional Enrichment Data
Threat Library
- Threat Library Related Information
Sources
Integrations

Vulnerabilty Risk Analyzer (VRA)

Vulnerability Risk Analyzer
Manage Vulnerabilities
- CVE Details
- Export CVEs to a CSV
Vulnerability Alerts

Threat Third-Party

Threat Third Party
Risk Assessment

Automation

Automation
Automate Actions on Alerts
Automate Internal Remediation
- Create IOC Management Rules
- Manage IOC Groups
Alert Profiler

Integrate Devices

Integrate Devices
The Threat Command Virtual Appliance
Integrate Cloud Devices
Integrate On-Premises Devices
Automate Leaked Credentials with Active Directory
- Integrate an Azure Active Directory Device
- Integrate a Microsoft Active Directory
InsightIDR Integration
IntSights App for Splunk
- Splunk App Install, Configure, and Upgrade
IntSights Splunk App for Splunk SOAR (Phantom)
- IntSights Splunk App for Splunk SOAR Installation and Configuration
- IntSights Splunk App for Splunk SOAR Activities
Rapid7 Threat Command App for Elastic SIEM
ServiceNow Security App
ServiceNow ITSM App
IntSights App for IBM QRadar
- IBM QRadar App Installation and Configuration
Integration Appendix

Settings

Update User Profiles
Configure Users
Configure Customers
Subscription Settings, Keys, and API
Authentication Options

IntSights Extend Browser Extension

IntSights Extend Browser Extension
Install and Configure Rapid7 Extend
Manage and Configure Rapid7 Extend
View IOCs and CVEs with Rapid7 Extend

Phishing Watch

Phishing Watch
Website Clone Detection
Website Redirect Detection
IFrame Detection
Phishing Watch Frequently Asked Questions

Welcome

Welcome to Threat Command
Register to Threat Command
Log in to Threat Command
Multi Tenant Threat Management
Rapid7 Product Connections
Customer Support

Threat Command

Threat Command
Architecture Overview
Threat Command Quick Start
Threat Summary
Manage Alerts
Remediate an Alert
Threats
Strategic Intelligence
IntelliFind
Create Reports
Configure Assets
- Asset Types and Formats
- Alerts from Assets
Asset Management
Configurations

Intelligence Hub

Overview
Quick Start
IOC Summary
IOCs
Investigation
- View Investigation Map and Overview
- View Investigation Additional Enrichment Data
Threat Library
- Threat Library Related Information
Sources
Integrations

Vulnerabilty Risk Analyzer (VRA)

Vulnerability Risk Analyzer
Manage Vulnerabilities
- CVE Details
- Export CVEs to a CSV
Vulnerability Alerts

Threat Third-Party

Threat Third Party
Risk Assessment

Automation

Automation
Automate Actions on Alerts
Automate Internal Remediation
- Create IOC Management Rules
- Manage IOC Groups
Alert Profiler

Integrate Devices

Integrate Devices
The Threat Command Virtual Appliance
Integrate Cloud Devices
Integrate On-Premises Devices
Automate Leaked Credentials with Active Directory
- Integrate an Azure Active Directory Device
- Integrate a Microsoft Active Directory
InsightIDR Integration
IntSights App for Splunk
- Splunk App Install, Configure, and Upgrade
IntSights Splunk App for Splunk SOAR (Phantom)
- IntSights Splunk App for Splunk SOAR Installation and Configuration
- IntSights Splunk App for Splunk SOAR Activities
Rapid7 Threat Command App for Elastic SIEM
ServiceNow Security App
ServiceNow ITSM App
IntSights App for IBM QRadar
- IBM QRadar App Installation and Configuration
Integration Appendix

Settings

Update User Profiles
Configure Users
Configure Customers
Subscription Settings, Keys, and API
Authentication Options

IntSights Extend Browser Extension

IntSights Extend Browser Extension
Install and Configure Rapid7 Extend
Manage and Configure Rapid7 Extend
View IOCs and CVEs with Rapid7 Extend

Phishing Watch

Phishing Watch
Website Clone Detection
Website Redirect Detection
IFrame Detection
Phishing Watch Frequently Asked Questions

Integrations

You can configure and manage your integrated devices in the Intelligence Hub > Integrations module. Go to the Threat Command Integrate Devices documentation to view information and instructions on all supported cloud and on-premise device integrations.

Did this page help you?