| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
About multitenancy and the tenant selector
The MITRE ATT&CK Adviser application is a multitenant enabled part of the Devo platform that enables visibility for multitenant Devo customers. The additional capabilities enable MSSPs to deploy the MITRE ATT&CK Adviser application at the parent domain level and have visibility into the child domain coverage.
...
Alerts can be installed only within the parent domain and cannot be pushed from the parent domain into the child domains.
Even though they are installed only for the parent domain and will trigger based on the parent domain data, they must be installed with the “All clients” option selected in the tenant dropdown.
These alerts contain the client field to inform analysts of the domain they come from . These alerts but will not be visible to users in child domains.
...