SecOps forum
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

Risk score configuration

Hi, I'm just getting started with Security incident response, and I'm lost on how the risk score gets calculated out of the box. I'm trying to go through the RiskScoreUtil script include, but just wondering if someone else has already done this, and ...

cbester by Tera Contributor
  • 2374 Views
  • 3 replies
  • 1 helpfuls

Resolved! Anyone successfully activated the Crowdstrike plugin?

Greetings,We are trying to activate the Crowdstrike plugin in our dev instance for a proof of concept cycle, however, we continue to receive error messages that we are inputting incorrect API key and AIP ID info - we pulled the API info from our Crow...

Where is the correlation_id value used?

Hello..   I have been trying to understand where is the correlation_id field is used in the security operations application when managing an incoming security event.OOB, I think the SIEM (Splunk) sends a snsecevent message to SN.   I get to see the c...

Resolved! issues with notifcations in security incident response?

Hi All! After installation of the Security Incident Response plugin we faces with unexpected behavior of notifications.After creation of the Security Incident   there is no notification about creation of the SIR. But there is one about update of the ...

maximus by Tera Expert
  • 1398 Views
  • 1 replies
  • 7 helpfuls