Reference

Operators are used in the Detection part of a Detection & Response rule. Operators may also be accompanied by other available parameters, such as transforms, times, and others, referenced later in this page. For more information on how to use ...

Overview Actions in LimaCharlie Detection & Response ( D&R ) rules define what happens after a detection is triggered. Common actions include generating reports, tagging sensors, isolating networks, and the frequently used task action, wh...