SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

Resolved! Instance Security Center score not updating

When viewing the new Instance Security Center dashboard's Daily Compliance Score, I notice the score does not update.  It says the last time it was updated was 5/31 and only looks like it contains 5/29-5/30 data.  This is a new Madrid (from Jakarta) ...

shawnbaar by Giga Expert
  • 3181 Views
  • 3 replies
  • 2 helpfuls

Missing Security Incident SLA details

We're trying to setup SLAs for Security Incidents and not getting any helpful metrics per SIR. Posting the configurations. The relevant fields are empty and "Made SLA" is always true. How can we get these fields to show details? Are these numbers tra...

VR - missing VIT

We have been running VR in prod for almost a year. Our SN VR is integrated with Rapid7. Came across a scenario that is baffling. The jobs seem to be successful but came across an asset. The Discovered Item record created successfully but there was no...

lak-ann by Tera Contributor
  • 931 Views
  • 2 replies
  • 0 helpfuls

Security Operations Observable type mappings and creation

Hello community,  We are wanting to cleanup and enrich our Observable data in order to effectively report details within the associated SIRs. I have the following goals. Focusing on 'unknown' observables (~4500 count) update the logic that maps the O...

ScottW1 by Tera Contributor
  • 1016 Views
  • 1 replies
  • 1 helpfuls

Azure Sentinel Integration

Hello, When using the Microsoft Azure Sentinel Incident Ingestion Integration For Security Operations is it possible to update security incidents when you make changes to the mapping in the profile? For example, if I update the profile to include a f...