Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About MPestell
About MPestell
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-15-2020
14Posts
0Likes
1Solution
Jun 15, 2020Last Visited
User
Activity
User
Profile
Latest posts by MPestell
| Subject | Views | Posted |
|---|---|---|
| 815 | 06-11-2020 08:58 AM | |
| 3437 | 12-10-2019 03:34 AM | |
| 1841 | 10-17-2019 04:52 AM | |
| 4264 | 10-07-2019 04:46 AM | |
| 3111 | 09-27-2019 08:43 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 08-19-2019 09:18 AM |
| Date Last Visited | 06-15-2020 05:02 AM |
| Total Messages Posted | 14 |
06-11-2020
08:58 AM
Hello team. I can look for an event to see failed login attempts with; event where operation = 'ConsoleLogin' and json.rule = $.responseElements.ConsoleLogin != 'Success' Is there a way to count these (like we see in config with 'as X; count(X) greater than 5'). I want an alert which shows when the number of failed login attempts exceeds 5. Thank you so much for your time in looking.
... View more
Labels:
- Labels:
-
Prisma Cloud
12-10-2019
08:39 AM
We don't support AWS Organizations via RQL as of yet - this support is coming in first quarter of next year. Thanks, Eddie
... View more
11-06-2019
11:20 AM
Prisma CLoud best practices.
... View more
10-17-2019
08:10 AM
RQL is built for looking for resources that exist and have a certain configuration. There isn't a good way to detect for resources that should exist without also alerting on other matching resources. Using a script or a SIEM to further filter out the resources you don't care about is also an option.
... View more
09-27-2019
08:43 AM
Actually I think I have it. I don't understand 'why' this works but it does. Be great if someone could explain the logic for future reference; config where api.name = 'aws-ec2-describe-vpcs' as X; config where api.name = 'aws-ec2-describe-flow-logs' as Y; filter 'not($.Y.resourceId equals $.X.vpcId) or ($.X.isDefault == true)'; show X; # appears that is applies the 'not' to both conditions. Also it does not like 'and' but does work with 'or'
... View more
09-16-2019
08:18 AM
Thank you. Yes have done so. Wondered if others had seen similar.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-15-2020
05:02 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
