Avatar

Julien Bernard

Follow
  • Total activity 8
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 6

Comments

Recent activity by Julien Bernard Sort by recent activity Recent activity Votes
    1. Community
    2. Using Sumo Logic
    3. Geo lookup on "data.ip OR ip"

    Dear Mark, The easiest may be to select which field is available first, then apply the GeoIP on the result (the field ip_merge will either contain the value of ip field if not empty, or the value o...

    • View comment
    • Julien Bernard
    • 1 vote
  • Official comment
    1. Community
    2. Sending Data
    3. SysInternals Sysmon

    Dear Matthew, Indeed, Sysmon provides a lot of important data for the SIEM (especially the process execution events). Sumo Logic CSE (Cloud SIEM Enterprise) already contains mappings and detection ...