[Smartevent] Mil Alerts Source and destination empty only with custom IOCs

[Aitor_Carazo]

Hi Checkmates,

I have recently imported some custom IOCs. I have configured the Smartevent to send alerts with Virus and Bot events.

When an event matches a custom IOC, the mail alert got the source and destination empty.

This only happen with all the custom IOCs, with other events works fine.

Regards

[Amir_Senn]

Hi,

I would check under event properties if those fields are marked.

I have a suggestion, try to edit the existing predefined event for AB, this will automatically cause it to save it as a user custom event and see if the problem reproduces.

Hope this is helpful.

Amir

[Aitor_Carazo]

Hi Amirse,

The event is actually a custom event. Is a copy of the predefined AB.

These are the selected fields in the Event.

Regards