Chronicle SIEM: Multi Event Rules Reviews

Sairam R. · Reviewed 8 days ago

Nimeshi D. · Reviewed 8 days ago

Himesh p. · Reviewed 8 days ago

Sunami D. · Reviewed 8 days ago

Prashant K. · Reviewed 8 days ago

Alif F. · Reviewed 8 days ago

Shivraj B. · Reviewed 9 days ago

Aditya P. · Reviewed 9 days ago

Shouvik M. · Reviewed 9 days ago

Subham Maity G. · Reviewed 9 days ago

Souvik D. · Reviewed 9 days ago

Geetesh K. · Reviewed 9 days ago

Ayub K. · Reviewed 9 days ago

Nishant C. · Reviewed 9 days ago

Tanmay C. · Reviewed 9 days ago

Lekhit P. · Reviewed 9 days ago

Sonalika s. · Reviewed 9 days ago

In the last question it asks for you to filter out users with $user.graph.entity.user.department != "Information Technology". However, tim.smith is returned and is shown as being a member of Information Technology. So, both the example code and the example are wrong as they didn't filter out that user with the rule.

Andrew H. · Reviewed 9 days ago

Anand B. · Reviewed 9 days ago

Rupam D. · Reviewed 9 days ago

Gopa B. · Reviewed 9 days ago

RAHUL D. · Reviewed 9 days ago

Gayatri P. · Reviewed 9 days ago

Gourabananda D. · Reviewed 9 days ago

Shyamsundar B. · Reviewed 9 days ago