Platform setup & administration
- Setting up connectors
- Connecting a detection source to Qevlar AI - Methodology
- Using Audit Logs
- Managing Team Access for Analysts
- NIST AAL2 Compliance - Session timeouts (AAL2 session policy)
- NIST AAL2 Compliance - Multi-Factor Authentication (MFA)
SOC Automation Enablers
- Running Entra ID actions from an investigation
- Extract Qevlar IOCs
- Qevlar Automations
- Multi-Language Support For Investigation Reports
- Understanding Tags in Qevlar AI
- Upcoming API Update: Improved Handling of Cloned Alerts
Managing Investigations
- Organizational Context Validation Flow
- Organizational Context
- Contextual Next Steps Recommendations
- Managing Per-Profile Access for Analysts
- Using CIDR ranges and wildcards in context items
- Testing organizational context impact