Devo Exchange and SciSec Teams hare happy to announce the Content update for July for Devo Exchange!

Geo Availability

Table of Content

Lookups

MitreAlertsExtendedDefinition

This lookup will allow you to add Alerts to your MITRE ATT&CK Adviser mapped to multiple tactics and techniques.  You can still use SecOpsAlertDescription to and alerts with a single mapping.

Activeboards

Cloud Azure Summary

Give a summary to clients about their Azure events like geolocalization, severities, average duration, critical events...

Office365 Active Directory

Overview of Office 365 Active Directory user and login events

Proxy Zxcaler Activity

General overview of Zscaler Proxy solution and activity.

Office365 Overview

Shows a summary of all Microsoft Office 365 activity: Active Directory, SharePoint, OneDrive, Teams and Exchange.

Use Cases

Office365 Overview Use Case

Works with the Office365 Management Injection synthetic data and the Office365 Overview activeboard

Content Packs

14 MITRE Tactics Content Packs

Full List available here.

97 MITRE Technique Alert Packs

Full list available here