3 docs tagged with "configuration"

How to use Learned Thresholds, the Ignored List, and Monitor Only to manage false positives on VAST and Qumulo without losing detection coverage.

Forward the raw audit event stream the ECA ingests to an external syslog server for SIEM ingestion, independent of Queries and Reports' own query database

How user lockout works for SMB and NFS on VAST and Qumulo when Ransomware Defender responds to a security event, and how to restore access afterward.