Blocking executions of IOC without showing any alerts

Shashanksinha — Mon, 07 Nov 2022 21:31:07 GMT

Hello ,

Please help us with the process of blocking of IOC process coming from various campaigns in cortex XDR .

Regards,

Shashank

Re: Blocking executions of IOC without showing any alerts

bbarmanroy — Tue, 08 Nov 2022 01:39:46 GMT

Hi @Shashanksinha you can create alert exclusions to prevent those alerts from getting created and also getting them stitched to incidents. Alternately, you can consider removing those IOC's from the IOC list if they are only being used for campaigns.

Ref: https://docs.google.com/spreadsheets/d/13K-RK6Y8mm508yu-xg93uyf1rvDAdBgE4q7OAUe15RE/edit#gid=1246474408

topic Re: Blocking executions of IOC without showing any alerts in Cortex XDR Discussions

Blocking executions of IOC without showing any alerts

Re: Blocking executions of IOC without showing any alerts