Quick Links
Using Blumira
Detection Rules & Filters
- Understanding and managing detection rules
- Enabling the detections your organization needs
- Setting priority and cooldown overrides for detection rules
- Using Detection Filters to customize detections
- Best practices for using detection filters to stop unwanted findings
- Testing Blumira detections
- See all 14 articles
Findings
- About Blumira Findings
- Investigating “365 Alert Policy: Creation of forwarding/redirect rule” findings
- Investigating "Audit Policy Change via Auditpol" findings
- Investigating “Azure Identity Protection Risky Sign-in” findings
- Investigating "Batch Script Execution" findings
- Investigating "Clearing of Windows Event Log" findings
- See all 22 articles
Reporting & Dashboards
Threat Response
- Blumira SOC Auto-Focus: AI-powered threat analysis and response
- Using Blumira Threat Response
- Configuring Microsoft 365 Threat Response
- Manually isolating an endpoint with Blumira Agent
- Automatically isolating Windows endpoints with Blumira Agent
- About Blumira's dynamic blocklists
- See all 9 articles