Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The value of the src_ip_addr field is in the 192.168.0.0/24 subnet
  • The value of the src_ip_addr field is 10.0.0.1 or 10.0.0.2
  • The field is_local exists

 

More information can be found here: Meron Query Language

Threat Triage Configuration Explained

...