Mar 15 2023 04:19 AM
Hello,
Could you please explain to me how these TI alerts work? I have just added 2 TI sources
Do I need to set up the rule now from gallery content? or I just need to add TI indicator and that's all?
and alert will be generated?
My understanding is that the rule will generate an alert whenever a Microsoft Threat Intelligence Indicator is matched with my event log. Could you confirm if this is correct?
Thank you.
Mar 16 2023 03:26 AM
Mar 16 2023 03:29 AM
Mar 23 2023 06:00 AM