Стол безопасности

Generate a tuned IBM QRadar detection for new service installed with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for office app spawning shell with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for security tool disabled with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for kerberoasting with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for rdp exposed to internet with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for large outbound data transfer with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for dns tunneling with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for web attack patterns with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for security group change with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for lateral movement via psexec with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for pass-the-hash with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for registry run key persistence with field mapping and false-positive guidance

Generate a tuned IBM QRadar detection for unusual parent-child process with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for impossible travel with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for account lockout spike with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for mfa fatigue with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for login from tor or anonymizer with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for service account interactive logon with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for new scheduled task created with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for new service installed with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for office app spawning shell with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for security tool disabled with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for kerberoasting with field mapping and false-positive guidance

Generate a tuned Google SecOps detection for rdp exposed to internet with field mapping and false-positive guidance