Forum Discussion
stianhoydal
Sep 30, 2021Brass Contributor
Custom mass download alert
Greetings, I have been messing around with Cloud App Security and have noticed their mass download alert, unfortunately i seem unable to add exclusion to this alert so it triggers way to often on tot...
- Oct 02, 2021At the end would something like
| summarize make_set(UserId) by ClientIP,Site_Url,Number_of_downloadoperations
Give you what you are after?
m_zorich
Oct 02, 2021Iron Contributor
At the end would something like
| summarize make_set(UserId) by ClientIP,Site_Url,Number_of_downloadoperations
Give you what you are after?
| summarize make_set(UserId) by ClientIP,Site_Url,Number_of_downloadoperations
Give you what you are after?
- stianhoydalOct 04, 2021Brass ContributorPerfect, thanks again Matthew 🙂