Correlation rule error
Synopsis
Field
Value
Activation Period
14 Days
Training Period
30 Days
Test Period
N/A (single event)
Deduplication Period
12 Hours
Required Data
Health Monitoring Data
ATT&CK Tactic
Impact (TA0040)
ATT&CK Technique
Network Denial of Service (T1498), Service Stop (T1489)
Severity
Medium
Description
An error was identified while running a correlation rule.
Attacker's Goals
N/A.
Investigative actions
N/A.
PreviousCopy a user's GnuPG directory with rsync
NextCreation or modification of the default command executed when opening an application
Was this helpful?
