Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Search

Search results

I need a solution We have several systems, which are primarily used by only one individual. We would like to be able to see if/when a "new" user logs in to that system. ...
Forum Discussion by mohpossum | 08 Feb 2013 | 5 comments
I need a solution Is it possible to refer to the Assets data, in the same manner as a Lookup Table, in creating a Correlation Rule? If so, how would I go about it (Specifically ...
Forum Discussion by mohpossum | 23 Apr 2012 | 7 comments
I need a solution We are using SSIM 4.7.3.50, and I would like to have an email notification of various Adminstrative activities, but specifically when new accounts/profiles are added ...
This issue has been solved
Forum Discussion by mohpossum | 07 Dec 2011 | 3 comments
I need a solution I need some assistance with a correlation rule creation. We need to build a multi-condition rule, similar to X, followed by Y. It is initially expected to be a ...
Forum Discussion by mohpossum | 03 Dec 2010 | 3 comments
I need a solution I am creating Lookup Tables for two Correlation Rules. These tables will be populated with Vendor Signatures as they become available, so that we do not have to ...
This issue has been solved
Forum Discussion by mohpossum | 17 Nov 2010 | 1 comment
I need a solution Has anyone configured, or is anyone familiar with how to configure, a Correlation Rule which would create an Incident with the following conditions?: Several ...
This issue has been solved
Forum Discussion by mohpossum | 24 Aug 2010 | 2 comments
I need a solution I would like to modify/customize the Rule, Organization IP in Watchlist, so that it is specific to individual subnets. We are logging our events centrally, but wish ...
This issue has been solved
Forum Discussion by mohpossum | 03 Aug 2010 | 7 comments