Skip to main content

Correlation RulesCorrelation Rules Guide

Table of Contents

Get Started with Correlation Rules

Welcome to Correlation Rules, the application on Exabeam Security Operations Platform you use to create and manage rules that automatically correlate an event to a specific result.

To understand what Correlation Rules is and how to use it, here are some key concepts that might help you.

  • Correlation Rules

    Surface well-known, well-defined abnormal behaviour and events with fact-based correlation rules.

  • Correlation Rule Sequences

    Sequences are the building blocks for rule logic that define the events and conditions that trigger a correlation rule.

  • Correlation Rules Templates

    If you don't want to create a correlation rule from scratch, use a pre-built template.