I am trying to create a regex to filter urls but it is not working. I am
trying to apply the following regex:/\w{20}\./g This is to show urls
that have 20 alphanumeric characters before the ".", i.e. trying to find
long urls in a hope to identify DGA...
Hello all, I am interested in learning about EPL and how to create the
rules. However I am finding it hard to locate useful resources to help
guide me in learning and understanding it. We have some here which I
review allot but having a guide to expl...
Hello everyone I would like to change the default number of returned
values in Security Analytics Investigation module meta group from 20 to
40 or higher: i.e. Alert ID returns 20 and I would like to set it to 40.
Any tips is welcome. Thanks
Hello everyone I am new to the world of security analytics and have a
deep passion to learn it. I was wondering if anyone has some
recommendations for great resources to help really understand and get
the full potential from this SA product. Thanks i...
Hello All I managed to find the answer. In case anyone is interested, SA
uses the Perl regex syntax. You have to enter the regex without the
"/.../" slashes. The regex that helped me in the end was:
\/\/[^w][a-z0-9]{13} This will hit on something lik...
Hello Khaled Please use the following google image for
reference:https://sadocs.emc.com/@api/deki/files/19968/ValuesPanelInitialView.png
The light grey text of "(20 of 20+ values)" is what I am referring to. I
want to change the default number of ret...
