HelloI have a rule called "Successful Windows Dormant Account Logon"
which works great, but i would need to tweak the number of days it
responds to but can't figure out how to change the number of days SIEM
acts on since last login (which is detected...
Hi @premchanderr Thanks for the answer!However, I cannot for my life
figure out how to find daysSinceLastLogon and further manage this via a
tweaked rule. I certainly wouldn't say no to some kind of instruction
around this.Note that I am relatively n...
You are leaving our website
You are leaving our site and we cannot be held responsible for the content of external websites
