Moved Risks into a single filter in Explorer
💜 We're always looking to improve your experience.
We've organized all of our behavioral signals - aka Risks - into a single filter in Event Explorer so that you can search for multiple risks at the same time in your workspace (instead of running multiple searches one after the other).
For example, you can now simultaneously check for the presence of TOR, VPN, or Proxy IPs in your workspace with the following filter: Risks Is Tor, VPN, orProxy
Our new Risks filter in Event Explorer
Previously, you had to search for each of these boolean signals one at a time in order to detect the specific behavior in your workspace (eg. TOR Is True > Search, etc.).
Note: The old boolean signals are no longer available in the Verosint application. Though they will continue to work in Rules, we encourage you to update your rule sets asap to use Risks (aka event.risks) instead. Reach out to [email protected] if you have any questions or concerns.