2018-08-07 03:24 PM
I am looking at the UEBA Hunting guide and it talks about Bro logs as a data source. Is some way to get Bro logs into RSA? How would this work?
2018-08-14 09:13 AM
can you provide the source doc that mentions this?
2018-08-16 03:01 PM
UEBA Essential Hunting Guide: https://community.rsa.com/docs/DOC-86470. The table in the Intrusion Behaviors section under the Required Data Sources column.
/Dion