About preet_mehta

preet_mehta · 03-26-2025

Hi folks,I have created a playbook with multiple widgets. When no playbook is attached to a case, and I manually attach a playbook with widgets, the widgets are successfully created on the Alert Overview page (Scenario #1).However, if a playbook with...

preet_mehta · 03-05-2025

Hi folks,I am ingesting an alert created in SecOps SIEM into SOAR using Google Chronicle connector. I have noticed that when add a variable in the outcome section of the rule, then it is visible in the event details part in SOAR alert with the name "...

preet_mehta · 02-04-2025

Hi folks,Needed a clarification about a scenario.I have a SecOps instance consisting of both: SIEM and SOAR capabilities.If an alert is generated using custom rules in SecOps SIEM, then will it be visible in the SOAR platform as well (under Case name...

preet_mehta · 01-02-2025

Hey folks,I have a rule that generates alerts if some log matches the conditions mentioned in the rule. However, when the alert is generated, it shows the name "[n/a]", as mentioned in the screenshot. Can someone explain why does this happen, and wha...

preet_mehta · 11-21-2024

Hello everyone,I’m looking for an integration that offers custom widgets to display data retrieved from the integration. By "custom widgets," I mean the ability to add HTML code to a widget in order to display specific information.I understand that I...

preet_mehta · 03-07-2025

This is very helpful, thanks.

preet_mehta · 03-06-2025

Hi @SoarAndy Can you elaborate on how to pin the attributes of interest ?My use case is to create custom HTML widgets that displays different fields of entities, but as per your answer, if using [Entity.field_name] does not necessarily provide me a f...

preet_mehta · 03-06-2025

Hi, let me have a look into this. However, is there a possibility that we add properties into entities directly from the SIEM rules ?Thanks.

preet_mehta · 02-06-2025

Hi @ylandovskyy Thank you for providing this explaination.Is it possible to attach our custom pre-defined widgets in our custom actions and provide in our integrations ?Currently, I believe that views can only be created from playbooks, or by updatin...

preet_mehta · 01-07-2025

Hey @jstoner Just an update.If the event_type is parsed as SCAN_NETWORK, then the alert name shows [n/a]. In the case of GENERIC_EVENT, the alert name contains the "metadata.product_event_type" field value.Also, when I populated the "target.asset.ip"...

My Stats

BobSig's Bio

Badges preet_mehta Earned

Recent Activity

Playbook Widget Behavior in Alert Overview

Enrich Entity Data in SOAR using rules in SIEM

Alerts created in SecOps SIEM are present in SecOps SOAR ?

How does an alert gets its name in SecOps SIEM

Need a reference for HTML code to provide a custom widget

Re: Enrich Entity Data in SOAR using rules in SIEM

Re: Need a reference for HTML code to provide a custom widget

Re: Enrich Entity Data in SOAR using rules in SIEM

Re: Everything you need to know about: Predefined Widgets

Re: How does an alert gets its name in SecOps SIEM