Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

HugoPinto
Contributor

Windows Defenter ATP - Cloud - BugFix

Hi,

We have found that the native parser for ATP is not collecting every fields, so we share with you guys our version1.

We are trying to get the IP address for correlation, the ATP gives the IP in the field: InternalIPv4List.

"InternalIPv4List": "10.3.224.94;192.168.1.72;127.0.0.1",

when the value  "IpAddress": "", is null, once we figer this raw data we post a version 2.

Cheers,
Hugo
0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.