.Joe
ClioSport Club Member
It's configured to be pretty panicky, but that's the soc's problem, and 90% of the alerts they send through seem like they're making it look like they're actively hunting on thereOops. Surprised if the sensor generated an alert for its own traffic though, or is this another tool the soc is using to monitor that sort of activity?
It was on the profile server as someone was logging in. 800 files (mostly teams) and the ip call outs to the crowd strike cloud server.
at this point the only alerts we pay attention to are the phone escalations.
it's a great money maker though
