Skip to main content

Correlation RulesCorrelation Rules Guide

Preview Correlation Rule Details

Quickly view a summary of a correlation rule.

  1. On the Rules tab, click the More The more menu; three vertical grey dots on a white background. menu for a rule.

  2. Click View Details, then view information about the rule:

    • Name – The correlation rule name.

    • Author – Who created the correlation rule.

    • Severity – The rule severity: None, Low, Medium, High or Critical.

    • Use Case – The Exabeam use case most relevant to the rule.

    • MITRE Properties – The ATT&CK techniques most relevant to the rule.

    • Tags – Tags associated with the rule.

    • Repeating Triggers – The field values by which the rule is suppressed if the rule is over-triggered.

  3. (Optional) To edit the rule, Click Edit Rule.