You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Looking at the EDR console I can see the comms IP for any process, but I don't see comms_ip being returned with events besides watchlist hits. Would it be possible to include comms_ip as a field in all telemetry that is forwarded?
Looking at the EDR console I can see the comms IP for any process, but I don't see
comms_ipbeing returned with events besides watchlist hits. Would it be possible to includecomms_ipas a field in all telemetry that is forwarded?