<aside> 💡 To prioritize your alerts, take 10 minutes to connect your tools. Fletch will process the alerts in your vulnerability scanner and EDR and determine which of these alerts are active right now, so you can prioritize those.

</aside>

Overview

When you connect a vulnerability scanner or EDR, Fletch will process the alert data.

Fletch extracts the CVEs from your vulnerability scanner alerts and the file hashes from your EDR alerts, along with the resource names associated to each.

The Fletch AI will correlate the CVEs (Hashes) to threat data in order to identify which of these are associated with threats that are timely and actionable.

Only these CVEs (Hashes), and their associated resources, will be surfaced as your prioritized alerts: use the prioritized alerts feed to focus your threat management efforts.

How to connect

If you haven’t connected anything yet

  1. Choose the integration you want to connect directly from within Prioritized alerts
  2. Follow the steps in the Connection Guide.

If you want to connect a second integration

  1. Go to the Integrations page (see shortcut in the main menu, bottom left hand side)
  2. Choose the integration you want to connect on the next screen, and follow the instructions.
  3. Follow the steps in the Connection Guide.

image.png

Connection Guides

These guides provide the instructions to provision the necessary access for Fletch to retrieve your alerts.