Apply an open-source set of detection rules to endpoints under LimaCharlie and use Tines to automate the triaging of alerts being generated by these rules.
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.
Import