Julien Bernard

  • Total activity 8
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 6


Recent activity by Julien Bernard Sort by recent activity Recent activity Votes
  • Dear Mark, The easiest may be to select which field is available first, then apply the GeoIP on the result (the field ip_merge will either contain the value of ip field if not empty, or the value o...

  • Official comment

    Dear Matthew, Indeed, Sysmon provides a lot of important data for the SIEM (especially the process execution events). Sumo Logic CSE (Cloud SIEM Enterprise) already contains mappings and detection ...