cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

[Smartevent] Mil Alerts Source and destination empty only with custom IOCs

Hi Checkmates,

I have recently imported some custom IOCs. I have configured the Smartevent to send alerts with Virus and Bot events.

When an event matches a custom IOC, the mail alert got the source and destination empty.

This only happen with all the custom IOCs, with other events works fine.

Regards

2019-11-05_9-49-22.png2019-11-05_9-52-14.png

 

0 Kudos
2 Replies
Employee
Employee

Re: [Smartevent] Mil Alerts Source and destination empty only with custom IOCs

Hi,

I would check under event properties if those fields are marked.

I have a suggestion, try to edit the existing predefined event for AB, this will automatically cause it to save it as a user custom event and see if the problem reproduces.

Hope this is helpful.

Amir

0 Kudos

Re: [Smartevent] Mil Alerts Source and destination empty only with custom IOCs

Hi Amirse,

The event is actually a custom event. Is a copy of the predefined AB.

These are the selected fields in the Event.

event_fields.png

Regards

0 Kudos