Forum Discussion
Detection Rule That alert on specific software
hay is there an option to create a detection rule that alert on specific software that installed on devices ? I want to get only new alerts , i don't want summary of all devices with this software...
You could make an alert for file creation events for the files specific to the software you want to watch.