Hi, Any idea how risk score is being calculated at Respond Server for
any Incident? Got to know that there is some internal algorithm for
this. Really very curious to know this in detailed explanation. Thanks
in Advance / Deepak Shukla #rsa algorithm...
Hi... Is there any feasibility to automate the report of logging event
source. Information of Last Reported Time, Event Source Address, Event
Source Type should be available in the report.I have gone through with
the Health n Wellness tab but from th...
Hi Team, If I delete any alert, in which file it will be
documented?Deleted one test alert, tried to locate in below files but
din't encounter any traces.respond-server.audit.log, respond-server.log,
respond-server.metrics.logSeeking your help here.....
Hi Team, I am working on a use-case for CyberArk and would like to know
if there is any feasibility to call "meta value" of any "meta key" in
the "meta value" of another "meta key". Scenario is: CyberArk-Password
Retrieved from another user. Case Stu...
Hi Sean, Thanks for your response!Well, my concern is more on Incidents
which we manually creates from Alerts. As you can see in the picture,
even for LOW priority Risk score varies from 50-90. Would like to know
how RSA calculate and assign Risk sco...
Hi Joshua, Just to test the internal traffic, have created below, rule
is saved but not thoroughing any alert. Don't know what's wrong here.
Your suggestions will be highly appreciated!
@Name('test-internal')@RSAAlert(oneInSeconds=0)SELECT * FROM Eve...
Hi Joshua, First of all it's really a great article!Does the script file
has to to imported under System > Global Notification > Servers ? If
yes, then I am getting below error while doing so. Where I am missing?
Thanks in Advance There was an error ...
Hi Eric...Hope you are doing well ! Below is what i tried to create,
unfortunately it is throwing error while saving. Do you mind to have a
look and suggest.
@Name('ep_user_in_user')@RSAAlert(oneInSeconds=0)SELECT * FROM PATTERN
[everye1=Event(device...
