-
750 items
9 item
238 item
169 item
13 item
1 item
88 item
226 item
10 item - For developers
This playbook provides a structured response to file metadata changes that could indicate insider threats, data staging, or policy violations. These actions include renaming, moving, or changing file timestamps—often precursors to exfiltration or account misuse. It automates SOC notification, enriches with user information, and provides analysts with decision-making authority to disable a user or close the case as a false positive
This playbook provides a structured response to file metadata changes that could indicate insider threats, data staging, or policy violations. These actions include renaming, moving, or changing file timestamps—often precursors to exfiltration or account misuse. It automates SOC notification, enriches with user information, and provides analysts with decision-making authority to disable a user or close the case as a false positive
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox
