Dear my friends, I need design correlation rules in sentinel, the rule
is used to specific username login in OA system from authorized
endpoint, But all endpoints obtain dynamic IP address from DHCP Server,
My customer have a map table about username to hostname or MAC address,
How to import into the sentinel? or how does collector map username into
hostname or MAC Address? Does the sentinel has asset module? how to
import into the asset module? Is there these fields about asset in
sentinel? Thanks!

steve_zeng's Profile:
View this thread: