Enterprise Intelligence
Revised Enterprise Intelligence to provide enterprise-aware context for security detections.
Added support for centralized lookup lists, including Allowed Lists, Block Lists, IOC Lists, UEBA Reference Lists, and Operational Intelligence Lists.
Custom detection rules can be written to reference these lists to deliver enhanced detection capabilities, enabling intelligent filtering, contextual enrichment, and improved detection fidelity.
Detections are automatically categorized and tagged based on matched intelligence lists, improving triage efficiency and response prioritization.
Last updated