u/Dependent-Ad833

I have been using an event search query into a dashboard to pull locations for each host based on their "Last seen" location. Problem is of course there is no historical data with this due to it being based on the location when the host was last seen.

I was thinking is there someway to pull this event search and write it to a file every hour and basically build a weekly report of this and where the host was scene every hour.

If this isn't a good way to do this do you have any ideas on how to keep track of the geolocation of employees if they work from home?

Hello,

We just got the Next GEN SIEM and are looking to set it up. We have installed sensors but other then that have not touched it at all. I would love some tips and tricks as well as suggestions on what to do first to really get the environment running.

Thank you!

Hello All,

I was wondering what have people used the Zscaler and crowdtrike integration for. Any cool use cases would be great to hear!

Hello All,

Is there a way to see what GPO's are applied to a host through the falcon console?

Possibly even pull a report of them all?

Hey would love some suggestions on a solo dragon hunting build. Looking to make a new file for a character specific to soloing dragons.

What would everyone suggest for a built to go that makes killing higher end dragons a bit easier?

Just looking to do some of the higher end things and am willing to change magics or stats.

Thank you

Any help would be appreciated I setup a SIEM connector via the API Client module. I followed the instructions to a tee but I am unable to see any events coming in. We did it in CEF format and the service is on an active but no events are coming in at all. I was sure to enable event streaming for the API client is there any other scopes I need or does anyone have any ideas?