UseCase | Dashboard | Check for | Data Sources | Escalation time window |
---|---|---|---|---|
Invalid Logins | Elastic Link | All Alerts | Falco Alert Stream | max 24h |
Outbound Connections | Elastic Link | Non whitelisted Connections | Falco Alert Stream | max 24h |
Update AOD Jira Ticket for SVV
UseCase | Dashboard | Check for | Data Sources | Escalation time window |
---|---|---|---|---|
Invalid Logins | Elastic Link | All Alerts | Falco Alert Stream | max 24h |
Outbound Connections | Elastic Link | Non whitelisted Connections | Falco Alert Stream | max 24h |
Update Jira Ticket at Customer Jira instance
Vulnerability Scan Report ....
Update Jira ..
CISO Office
CIO
MOD