jia_yang
-
Posts
12 -
Joined
-
Last visited
Kudos
-
jia_yang gave kudos to Marcos in How to delete event?
It is not possible to remove detections. You can only use filters or event filters in the admin section of the setup to hide specific events. Records will be purged based on your retention settings:
-
jia_yang gave kudos to Marcos in How to check detection rules is being updated?
If you create a custom rule and edit it later, you should see the last changed date in that column. Default (built-in) rules are rarely updated.
-
jia_yang received kudos from Nightowl in Blocking Specific Programs
firewall service deny or give it a try.
