ReflexSOAR - Automatic alert handling with Event Rules
Автор: Tellaro
Загружено: 2022-04-27
Просмотров: 330
Описание:
Are you dealing with large amounts of events or alerts? Do you struggle to keep up? If so, ReflexSOAR event rules are a must. Event rules allow organizations to automatically take action against historical, current, and future events with automated logic. This video demonstrates how to use the Reflex Query Language (RQL) to match select events and take actions such as dismissing events with select statuses and descriptions, merging events into cases, or tagging events.
Also included in this video is how to use RQL mutators and expressions such as:
Mutating the value of a field to match even on obfuscated data (base64 encoded, random uppercase and lowercase values, etc)
Choose proper expressions such as Contains, RegExp, In, etc.
Utilize static or dynamic intel lists for even more responsive automation
The solution shown in the video is:
https://reflexsoar.com
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
