Skip to main content
Solved

About Alert Data Source and Research Usage

  • September 27, 2024
  • 1 reply
  • 10 views

Forum|alt.badge.img+1

Hi, I’d like to ask where the alert data on SecOps is sourced from. Additionally, is this data available for further research and use in developing tools related to alert analysis?

Best answer by dnehoda

Are you talking about the data from the alerts and IOC page? 

If so, that data is ultimately sourced from your Security Technologies and then ran through the rules engine.  Yes that can be used for SOAR cases, etc. 

Can you clarify the ask here?

1 reply

dnehoda
Staff
Forum|alt.badge.img+16
  • Staff
  • Answer
  • September 27, 2024

Are you talking about the data from the alerts and IOC page? 

If so, that data is ultimately sourced from your Security Technologies and then ran through the rules engine.  Yes that can be used for SOAR cases, etc. 

Can you clarify the ask here?