mcas Archives -

Using user agent string to block USA based attacks

Recently, we've noticed more USA based attacks. Using MCAS we can block those attempts

sweet macaroons on round plate on wooden table

Reducing the number of false positive in MCAS

Getting MCAS setup should have been your first task but if you missed it, enriching the data will help you train MCAS and reduce the number of false positives and purely information alerts.

Split an MCAS Alert to get the notification you need

What if we want both low and high severity alerts from a policy? Technically MCAS can't do this.

strange man with swimming equipment on street

Edit MCAS default policies to reduce alert volume

By make a few simple changes we can greatly reduce the amount of noise generated by MCAS and begin to use it powers for good and provide our tech staff with real actionable material to work with.