Browse your product documentation including release notes and installers
This documentation provides information for administrators who are responsible for integrating Cb Response with various tools. It discusses:
Document Date: May 2017
We would like to know is there any score matrix for watchlists priority based on high confidence. For example - powershell.exe spawning from excel.exe categorized as High and cmd.exe spwaning generic wmic command as low. I know alliance score is there for threat intelligence feeds, but is there any score matrix is there for watchlist, so we can get the data in splunk and write use case?