Avatar

Julien Bernard

  • Total activity 8
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 6

Activity overview

Latest activity by Julien Bernard
  • Avatar

    Julien Bernard commented,

    Dear Mark, The easiest may be to select which field is available first, then apply the GeoIP on the result (the field ip_merge will either contain the value of ip field if not empty, or the value o...

  • Avatar

    Julien Bernard commented,

    Official comment

    Dear Matthew, Indeed, Sysmon provides a lot of important data for the SIEM (especially the process execution events). Sumo Logic CSE (Cloud SIEM Enterprise) already contains mappings and detection ...