@schimpy , it does produce a lot an overwhelming amount of indicators and notable events. I currently have a ticket in with support on how to best reduce those numbers by possible filtering out blocked or failed actions in the panel queries.
... View more
HI, @schimpy We were able to see data after adding some data models. For us it was a matter of waiting. Try adding Web or Network Traffic data models to Mandiant Advantage Correlation Settings. It took several hours for the data to start filling out in the panels.
... View more
We've just installed Mandiant Advantage App and I was hoping someone else here could provide some guidance on what to do after installation and configuration of api keys.
... View more
We have successfully implemented the taxii feed from NH-ISAC and are looking for examples or use cases from others that currently work with this feed.
... View more