0answers
QuestionOpen
Sentinel analytics rules firing too much — tuning approach?
My lab Sentinel is alert-storming. What's a sane order of operations to tune scheduled analytics rules?
Nina Petrov
Spaces
Recent threads with this tag.
My lab Sentinel is alert-storming. What's a sane order of operations to tune scheduled analytics rules?
Want to start dynamic analysis. Terrified of infecting my host or network. What's the minimum safe setup?
Trying to analyze a sample but strings is mostly garbage and imports are minimal. I think it's packed. Where do I go from here?
Gutted. Scored 710, need 750. I felt okay walking out. How do I figure out where I actually lost it?
I can get a foothold but keep missing the priv-esc path on the harder boxes. What enumeration am I probably skipping?