Auto response (Auto remediation) SIEM

Elastic Security SIEM
1

Hello everybody,

I never used a webhook before, so I wanna know if it's possible for example to add automatic rules to my firewall when I detect an attack (brute force, port scanner ...).

I have searched webinar for that but I didn't find, could you please give me some hints on this subject.

Thanks for your help
Best regards

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.