/
Security Operations Entities Mapping
Security Operations Entities Mapping
Entities mapping
This is the specification of common criteria to apply where possible in alert creation for each technology and union table.
The specification includes:
Description about the table in use and how can it be used to create alerts.
SecOps entities.
Alert template to use.
There are various SecOps entities and their union tables:
, multiple selections available,
Related content
Navigating the application
Navigating the application
Read with this
Custom SecOps detections
Custom SecOps detections
More like this
ips.all.alerts
ips.all.alerts
More like this
cloud.aws.securityhub
cloud.aws.securityhub
More like this
ips.all.alerts
ips.all.alerts
More like this
Security Operations lookups
Security Operations lookups
More like this