SN08: Primer: Writing Rules Not Meant to be Broken (Part 2)

Document created by jmerrill on Sep 30, 2009Last modified by jmerrill on Jul 8, 2014
Version 4Show Document
  • View in full screen mode

SN08
Primer: Writing Rules Not Meant to be Broken
Speaker: Chris Brown, Worldwide Technical Trainer-ArcSight
This primer session will demonstrate how rules are constructed. We will review considerations when creating rules, and how rules can be used to identify events that require further investigation.
Level: Basic

Attachments

Outcomes