User Profile
tipper1510
Brass Contributor
Joined 5 years ago
User Widgets
Recent Discussions
Unified Portal - Sentinel incident losing set tactics
Hi, Just trialling the unified portal, and incidents in Sentinel seem to lose any tactics set via the analytic rule. Plus the resulting incident has a slightly different title, assume after being converted to 'Defender speak'. We have a standard rule TI MAP IP entity for Office365 and the incident is TI Map IP entity for Office365 involving one user and the tactic is missing even though its in the original rule? Anyone else experiencing the same? Regards, TimString functions within playbooks
Hi, Have the following string that I need to tidy up: "hostname","{\r\n \"LastLog\": [\r\n \"2024-06-25T16:15:35.751991Z\"\r\n ]\r\n}" so it can have hostname 2024-06-25 16:15:35 I have attempted to combine replace statements with no luck... Any ideas.. Many thanks, TimAzure Web App and Integration of KeyVault
Hi, Attempting to use an web app to support the integration of an HTTPS forwarder for Prisma logs. Have created a key vault to store the workspace id and primary key for the workspace and have turned on the system identity. The managed identity has the required access to retrieve from the key vault. The issue is where does the key vault get defined withinthe web app? Any help would be much appreciated. Many thanks, Tim
