Primer: Writing Rules Not Meant to be Broken
Speaker: Chris Brown, Worldwide Technical Trainer-ArcSight
This primer session will demonstrate how rules are constructed. We will review considerations when creating rules, and how rules can be used to identify events that require further investigation.
Click HERE to access part 2 of SN08