BIOC - suggestion for improvement

Cyber1985 — Mon, 06 Jun 2022 18:21:25 GMT

Hey ho!

I've a suggestion for improvement:

BIOC - Browser downloads an .hta or .application file --> You could insert also brave browser.

Thanks

Rob

Re: BIOC - suggestion for improvement

KanwarSingh01 — Wed, 08 Jun 2022 01:53:00 GMT

Hi @Cyber1985

Generally I think customization of a BIOC rule should be on a Customer itself, I take BIOC rule by PA as more of an example for people like us and as well as detection rule for a generic environment not for a specific environment which means that if there is any rule which we think is not best for our environment we create a copy of that rule forked from PA BIOC rule and then add additional details accordingly for best interest of our environment.

So lets say you can add all the portable browsers in that rule along with wave, brave etc.

Thank you and Regards

topic BIOC - suggestion for improvement in Cortex XDR Discussions

BIOC - suggestion for improvement

Re: BIOC - suggestion for improvement