Hello,I monitor my Windows active directory which is also my DNS server
through the Fortisiem Windows agent, How can I detect the change made on
the DNS side ( record deleting or changing)?What types of Windows events
ID should I look for when search...
Hello, I successfully integrated the FMC from Cisco with the fortisiem
platform, but all the logs I received are unkown.Any suggestion to
resolve this issue?
I succeeded to forward logs from the forcepoint NGFW to fortiSiem but
all the event types received are unknown " unknown event type".
FortiSIEM , #Forcepoint
Hello,My four Active Directory accounts were successfully joined to
Fortisiem using LDAP and WMI credentials, but up until this point, I was
unable to get the users and groups from the AD to Fortisiem; nothing was
visible on the CMDB>Users page. Fort...
Hello, I made the first suggestion and it works perfectly, I just have a
question about the type of records in the msg we found " A resource
record of type 1, name test.homelab.local and RDATA 0x01010101 was
deleted from scope Default of zone homelab...