https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/timeframes-for-bioc-rules/m-p/351389#M335 <P>It'd be very useful for things like failed logons or network connection attempts if BIOC rules could utilise timeframes.</P><P>&nbsp;</P><P>Is this on the roadmap?</P><P>&nbsp;</P><P>It could work well if this was done in a similar way to NGFW → OBJECTS → Custom Objects → Vulnerability → &lt;object&gt; → Signatures → Combination → Time Attribute:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" style="width: 600px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27886iD767D7A37C930AE2/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" alt="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" /></span></P> Wed, 23 Sep 2020 09:53:42 GMT BenHooper 2020-09-23T09:53:42Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/timeframes-for-bioc-rules/m-p/351389#M335 <P>It'd be very useful for things like failed logons or network connection attempts if BIOC rules could utilise timeframes.</P><P>&nbsp;</P><P>Is this on the roadmap?</P><P>&nbsp;</P><P>It could work well if this was done in a similar way to NGFW → OBJECTS → Custom Objects → Vulnerability → &lt;object&gt; → Signatures → Combination → Time Attribute:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" style="width: 600px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27886iD767D7A37C930AE2/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" alt="2020 ∕ 09 ∕ 23 10꞉52꞉33 - PA_LAB_-_Google_Chrome.png" /></span></P> Wed, 23 Sep 2020 09:53:42 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/timeframes-for-bioc-rules/m-p/351389#M335 BenHooper 2020-09-23T09:53:42Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/timeframes-for-bioc-rules/m-p/367541#M415 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/150738">@BenHooper</a>&nbsp;-</P><P>&nbsp;</P><P>Please check in with your Cortex account team for info on this functionality.&nbsp; We are not authorized to give roadmap info over public forums.&nbsp;&nbsp;</P> Sun, 06 Dec 2020 18:31:56 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/timeframes-for-bioc-rules/m-p/367541#M415 dfalcon 2020-12-06T18:31:56Z