Devo Exchange has released a new Lookup for you! The SecOpsWinPermittedDomains Lookup adds whitelisting functionality to your detections by referencing a list of permitted domains. Using this Lookup will lower your false positive rate when properly configure and can help make your alerts more actionable.
Download now from Devo Exchange
Note: This look up require Security Operations.