The L2-Entity Monitoring - Situational Awareness package is designed to identify anomalies dealing with account authentication and management. This package has to be integrated with any Product packages that track account activities. This package requires configured L1-Entity Monitoring - Indicators and Warnings package for further detection and investigations.
The idea to have the L2-Entity Monitoring - Situational Awareness package is to build some common functionality (such as Rules) that can be applied to multiple Product packages. Wherever possible, only the filters will reside within the product packages. Those filters in the product package will then be linked into an OR statement in the null (false) L1 package filter where appropriate.
Activate Base - Version 2.5.0.0 and higher
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
On this release we have added Mitre Att&ck tagging for the following use cases:
This update includes minor bug fixes.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox