Skip to main content

MAC address not being created as entity

  • May 22, 2025
  • 1 reply
  • 12 views

Forum|alt.badge.img

Hi,

How can we remove MAC address being created as entity in any secops cases in secops?

1 reply

ylandovskyy
Staff
Forum|alt.badge.img+16

Hey @ShubhamK21 ,

Entities are created via Ontology Mapping. If the Mac Address entities is created automatically, then it means that there is an ontology mapping associated with that connector that creates those entities. You can just remove mapping for Mac Address entity.

For more information about how entities are created, refer to this doc: https://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/create-entities-mapping--modeling.