Integrate log analysis with active defense measures #358
Labels
difficulty/hard
lang/c++
mode/hunt
mode/monitor
mode/scan
module/event-logs
platform/client
type/enhancement
New feature or request
Needs #354 before this is fully applicable.
Hunts and scans should include logs into their searches to find processes and programs that may have certain capabilities or have been used maliciously
The text was updated successfully, but these errors were encountered: