Promotion: External Alerts

CrowdStrike External Alerts

Sep 2, 2025 · Data Source: Crowdstrike Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each CrowdStrike alert written to the configured indices. Enabling this rule allows you to immediately begin investigating CrowdStrike alerts in the app.

Elastic Security External Alerts

Aug 5, 2025 · Data Source: Elastic Security Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each Elastic Security alert written to the configured indices. Enabling this rule allows you to immediately begin investigating Elastic Security alerts in the app.

Google SecOps External Alerts

Aug 4, 2025 · Data Source: Google SecOps Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each Google SecOps alert written to the configured indices. Enabling this rule allows you to immediately begin investigating Google SecOps alerts in the app.

Microsoft Sentinel External Alerts

Aug 4, 2025 · Data Source: Microsoft Sentinel Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each Microsoft Sentinel alert written to the configured indices. Enabling this rule allows you to immediately begin investigating Microsoft Sentinel alerts in the app.

SentinelOne Alert External Alerts

Aug 4, 2025 · Data Source: SentinelOne Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each SentinelOne alert written to the configured indices. Enabling this rule allows you to immediately begin investigating SentinelOne alerts in the app.

SentinelOne Threat External Alerts

Aug 4, 2025 · Data Source: SentinelOne Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each SentinelOne threat written to the configured indices. Enabling this rule allows you to immediately begin investigating SentinelOne threat alerts in the app.

Splunk External Alerts

Aug 4, 2025 · Data Source: Splunk Use Case: Threat Detection Resources: Investigation Guide Promotion: External Alerts ·

Share on:

Generates a detection alert for each Splunk alert written to the configured indices. Enabling this rule allows you to immediately begin investigating Splunk alerts in the app.