hello Team , could any one help me understand why IOC MATCHES tab on alerts and ioc ciew list benign websites like cloud.google.com as an IOC
Question
ioc matches tab classifies benign cloud.google.com as a IOC match
+8- Silver 2
hello Team , could any one help me understand why IOC MATCHES tab on alerts and ioc ciew list benign websites like cloud.google.com as an IOC
+11For IOC matches, this is expected, since the logs coming in contains the 2 domains, and matched to the backend GTI context data.
The UI you captured seems from Emerging Threats center, correct?
+11Checked, seems it’s an known issue, the fix might not reach your region, can you open a support case on this?
Login to the community
Login with SSO
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.