Skip to main content
Myrmex Firewall Integration Vulnerability Management

​
Network Device Integration Services

For Network Devices (Cisco, WatchGuard, Juniper, Sophos, Generic SSH), the Myrmex platform utilizes specialized agents to provide comprehensive network management and security capabilities:
Role: Direct integration and execution agent for network devices.Integration Tools: Allow execution of specific actions via API/SSH for firewall rule management, VPNs, routing configurations, and status monitoring.SSH Network Capabilities: Provide direct command line (CLI) access for command execution, diagnostics, task automation, and troubleshooting on any SSH-compatible network device.Integration Points: Direct API integration and SSH connectivity for comprehensive network device management.
Role: Provides threat intelligence and reconnaissance for network infrastructure.Infrastructure and WHOIS Analysis: Provides context about ownership and reputation of IPs and domains associated with network traffic, assisting in security policy configuration.Integration Points: Threat intelligence feeds and infrastructure analysis for network security posture assessment.
Role: Supports network security through external research and intelligence.Vulnerability and Trend Research: Offers information about vulnerabilities in network devices and best configuration practices to mitigate risks.Integration Points: External threat intelligence and vulnerability databases for proactive network security updates.
Role: Essential for network security documentation and reporting.Structured Report Generation: Creates professional documentation of network configurations, security audits, and incident response plans.Integration Points: Comprehensive documentation and reporting for network security compliance and audit purposes.

​
Security and Monitoring Platform Integration Services

For Security and Monitoring Platforms (Trend Micro, Wazuh, Wazuh Indexer, Elastic Security), the Myrmex platform utilizes specialized agents to provide comprehensive security monitoring and threat detection capabilities:
Role: Direct integration and execution agent for security and monitoring platforms.Integration Tools (hydra_trendmicro, hydra_wazuh, hydra_wazuh_indexer, hydra_elastic_security): Allow orchestration of actions such as log management, event analysis, and response actions on these platforms.Integration Points: Direct API integration with security platforms for real-time response.
Role: Provides threat intelligence and reconnaissance for security platforms.IoC Investigation and Threat Actor Attribution: Enriches events with external intelligence, correlating indicators of compromise and identifying threat actors.Integration Points: Threat intelligence feeds and IoC analysis for enhanced security platform capabilities.
Role: Supports security platforms through external research and intelligence.Threat Research and CVE Analysis: Provides context about new threats, vulnerabilities, and attack techniques, enhancing the prevention capabilities.Integration Points: External threat intelligence and vulnerability databases for proactive security updates.
Role: Essential for security platform documentation and reporting.Detailed Security Analysis: Documents incident response and audit results generated by these platforms.Integration Points: Comprehensive documentation and reporting for security compliance and audit purposes.

​
Server and Endpoint Integration Services

For Servers and Endpoints (Windows, Linux, macOS), the Myrmex platform utilizes specialized agents to provide comprehensive device management and security capabilities:
Role: Orchestrates device management and precision technical response.Strategic Capabilities: Under Centurion’s command, Perseus monitors health status, manages inventory, and executes surgical operations at the system level for diagnostics and remediation.Direct Command Execution (CMD, PowerShell, Shell): Provides the technical interface for Centurion to perform diagnostic and remedial actions directly on endpoints.File System and Process Operations: Extends Centurion’s intelligence to system-level investigations, performing file and process manipulation for orchestrated response.Integration Points: Centurion’s primary arm for system-level operations and technical response on endpoints.
Role: Integration and execution agent with SSH capabilities.SSH Network Capabilities: Can be used for Linux server management via command line, complementing Perseus actions.Integration Points: SSH connectivity for remote server management and automation.
Role: Threat intelligence and reconnaissance specialist for servers and endpoints.Exposed Credentials and Digital Footprint Analysis: Identifies risks and threats that may affect servers and endpoints, such as leaked credentials and internet exposure.Integration Points: Threat intelligence feeds and risk assessment for endpoint security.
Role: External research and intelligence specialist for server and endpoint security.Vulnerability Research and Best Practices: Provides crucial information about operating system and application vulnerabilities, plus hardening recommendations.Integration Points: External threat intelligence and vulnerability databases for proactive security updates.
Role: Essential for server and endpoint documentation and reporting.Configuration Documentation and Security Analysis: Creates detailed reports on server configurations, security assessments, and incident response plans.Integration Points: Comprehensive documentation and reporting for server and endpoint security compliance.

​
Cloud Integration Services

To deliver services in integrated Clouds, the Myrmex platform utilizes orchestration of specialized agents, with Hydra acting as the central execution point:
Role: I am the main agent responsible for interacting with integrations APIs.Capabilities: Through my hydra_gcp, hydra_aws, and hydra_office365 tools, I execute Resource Management, Operations Automation, and part of Security and Compliance actions, such as applying policies and configurations.Integration Points: Direct API integration with cloud platforms for real-time resource management and policy enforcement.
Role: Contributes significantly to Threat Detection and Response and Security and Compliance.Capabilities: Orion provides threat intelligence, analysis of indicators of compromise (IoCs), and infrastructure mapping, enriching the ability to identify and mitigate risks in cloud environments.Integration Points: Threat intelligence feeds and IoC analysis for cloud security posture assessment.
Role: Supports Security and Compliance and Threat Detection and Response.Capabilities: Collects and verifies external information, such as vulnerabilities (CVEs), threat trends, and security best practices, which are crucial for keeping cloud environments protected and updated.Integration Points: External threat intelligence and vulnerability databases for proactive security updates.
Role: Manages virtual machines and cloud instances with full inventory and execution capabilities.Capabilities: Perseus manages virtual machines or specific instances within clouds, providing hardware/software inventory, health monitoring, and direct system-level operations (command execution, file management, processes).Integration Points: OS-level management and response capabilities for cloud instances.
Role: Fundamental for Security and Compliance documentation and reporting.Capabilities: Generates detailed reports on cloud security posture, audits, vulnerability analyses, and incident documentation, ensuring that all actions and configurations are properly recorded and presented in professional formats.Integration Points: Comprehensive documentation and reporting for compliance and audit purposes.
In summary, Myrmex provides a unified and robust security service where Centurion acts as the strategic brain, utilizing the specialized arms of Orion, Iris, Perseus, Hydra, and Scribe to coordinate an integrated defense across your entire infrastructure.