Good day all, I have a question today. Currently I use the Exchange Connector to create cases from emails reported to Security by our userbase. The org is starting to roll out some O365 stuff which includes a Button to report emails to O365. These re...

Hello fam, got a question for ya'll: Suppose I have an alert that contains an entry like device=xyz Suppose I am able to query historical data and determine information like: device=abc, seen 50 times device=lmk, seen 25 times I'd like to basically a...

Good day all, Is there a way to stop duplicate entities from being created on a specific case? For example, I am using the exchange connector and creating an entity per discovered URL. I'm looking at a case now that has 20+ URLs but really only 5 uni...