MAC address not being created as entity

Hi,

How can we remove MAC address being created as entity in any secops cases in secops?

0 1 92
1 REPLY 1

Hey @ShubhamK21 ,

Entities are created via Ontology Mapping. If the Mac Address entities is created automatically, then it means that there is an ontology mapping associated with that connector that creates those entities. You can just remove mapping for Mac Address entity.

For more information about how entities are created, refer to this doc: https://cloud.google.com/chronicle/docs/soar/admin-tasks/ontology/create-entities-mapping--modeling.