This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Log in to ask a question
nahatx
Bronze 4
Bronze 4
Since ‎03-25-2024
yesterday

My Stats

  • 12 Posts
  • 3 Solutions
  • 7 Likes given
  • 7 Likes received

Rlopez2005's Bio

Badges nahatx Earned

View all badges

Recent Activity

Feature RBAC for Data RBAC restricted Admins

12-03-2024
Hi, does anyone have the greediest set of permissions that could be granted to a custom GCP IAM role in tandem to Chronicle API Restricted Data Access without violating data RBAC?As a partial example, looking at Chris Martin's Data RBAC blog here, he...

Unable to find MAC addresses' entity.asset.first_seen_time

05-10-2024
I'm trying to get a first_seen_time for MAC address assets in a rule, but finding that a majority of the derived_context asset entities have entity.asset.first_seen_time set as 1 second after epoch. Motivation being to create a rule similar to the on...