Platform setup & administration
- Setting up connectors
- Connecting a detection source to Qevlar AI - Methodology
- Using Audit Logs
- Managing Team Access for Analysts
- NIST AAL2 Compliance - Session timeouts (AAL2 session policy)
- NIST AAL2 Compliance - Multi-Factor Authentication (MFA)
SOC Automation Enablers
- Automating response
- Running Entra ID actions from an investigation
- Extract Qevlar IOCs
- Multi-Language Support For Investigation Reports
- Understanding Tags in Qevlar AI
- Upcoming API Update: Improved Handling of Cloned Alerts
Managing Investigations
- Organizational Context Validation Flow
- Organizational Context
- How does Qevlar calculate severity?
- Verdict labels renamed: Benign and Suspicious
- Groups: how Qevlar groups similar alerts
- Contextual Next Steps Recommendations