Here are some experiences while using DarkTrace. I am putting them together as a note for myself.
Time Zone Change
By default, your incident log, breach log will using UTC time zone to display logs. Click Top Right date and time and search your time zone , then select the one you are in, click Set Time to button to apply.
Change Device Priority
Change Subnets Tracking Methods
For VPN Subnets, it is recommended to use user tracking , rather than using dhcp tracking.For subnets where there is no DHCP, vendor does recommend disabling DHCP tracking. New subnets are automatically added to subnet admin with DHCP as the default.
TAXII Source Configuration
Two popular free Taxii sources:via Blogger https://ift.tt/39a7Oc1
January 07, 2021 at 09:51PM Security