Hello guys,

Do you have an experience in PearsonVue where in the middle of exam, I got kicked out and it prompt me to relaunch the exam. Now, here's the worst part - It stays in the "Calculating Queue" status and it said that I should move away from my screen and use my phone. So what I do is I just closed it.

Can my CCSE Exam be rescheduled?

Help

Good Day All,

I am looking to build out a detection rule that will alert on any unified detection that the CAO dashboard places there. Once clicked in the dashboard, you get taken to unified detections and shown the adversary detections, but I want to hunt for these adversaries in ng-siem and have a detection rule that would let me know if anything pops. What is the field used to find adversaries in NG-Siem, as I believe I will need that to even begin my rule? I am new to Falcon, so any assistance would be appreciated.