Enrich Detectors With Feeds
Create/Update Detector flow
While creating Security Analytics detectors, customers will be able to choose threat feeds that they wish to enrich their detectors with.
Detector rules would be constructed from the latest version of the threat feeds to identify potential threats from the Indicators of Compromise(IoC’s) such as IP addresses, network hosts, domains, file hashes, email ids which apply to the chosen log types.
RFC: #671
Enrich Detectors With Feeds
Create/Update Detector flow
While creating Security Analytics detectors, customers will be able to choose threat feeds that they wish to enrich their detectors with.
Detector rules would be constructed from the latest version of the threat feeds to identify potential threats from the Indicators of Compromise(IoC’s) such as IP addresses, network hosts, domains, file hashes, email ids which apply to the chosen log types.
RFC: #671