Hi all,
Anyone having issue with this button?
I'm not sure if this is associated with my SecOps instance only or the issue is happening to everyone. I would like to use retrohunts but they generate alerts unfortunately and I don't want many alerts pop up in my cases page.
Rule test is working in my tenant. If this is still an issue, please submit a case. If the retrohunts are generating alerts, that would be due to the rule being set to alerting. You could temporarily disable alerting from the rule and run a retrohunt to generate detections only, or you could copy the rule and run it with alerting turned off instead.
Rule test is working in my tenant. If this is still an issue, please submit a case. If the retrohunts are generating alerts, that would be due to the rule being set to alerting. You could temporarily disable alerting from the rule and run a retrohunt to generate detections only, or you could copy the rule and run it with alerting turned off instead.
Unfortunately, I can't submit a case due to not having Standard Support but I will try disabling alerting and do a retrohunts as a workaround until this issue is fixed.
Thank you @cmorris .
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.