All Categories > How To
39 articles
14 articles by 1 author
Motivation. What if you want to whitlelist network tools, but only for your network administrators? Well now you can You can create whitelist rules like email = 'admin1@company.com' OR 'admin2@compan…
Updated 2 seconds ago by Andrew Hill
RocketCyber now has apps for common MSP antivirus (AV) solutions: Wiindows Defender, SentinelOne, and Webroot. Phase 1 Our current AV apps bring all the threats available on your AV dashboard to your…
Updated 2 weeks ago by Andrew Hill
The Webroot App allows you to access your Webroot antivirus threats right on your RocketCyber dashboard To set up your Webroot App on RocketCyber, you will need the following pieces of account inform…
The table below describest the various Windows Defender Configuration Options found in Defender Manager and their default recommended values. Category Default Value Description General Enable Windows…
Updated 4 weeks ago by rob stalnaker
The SentinelOne App allows you to access your SentinelOne antivirus threats right on your RocketCyber dashboard How to Set Up. Find your SentinelOne API Token Log in to the SentinelOne portal. Go to…
Updated 1 month ago by Andrew Hill
Overview. The Firewall Log Analyzer works similarly to an Intrusion Detection System, but without buying and installing an expensive device (if you have an IDS/IPS, our app can help make sense of tho…
Below are the most common problems/troubleshooting tips for the Firewall Analyzer Windows Firewall blocking incoming traffic on the machine. Accidentally putting the Firewall's IP instead of the moni…
About Crimson Channel Logs. Windows includes two categories of event logs: Windows logs, and Applications and Services logs. The Windows logs category includes the event logs available in previous ve…
Updated 1 month ago by Carl Banzhof
RocketCyber's Firewall Log Analyzer is architected to eliminate the need of shipping hardware or deploying complex software. To facilitate the collection of firewall telemetry, UDP 514 is the recomme…
Updated 3 months ago by Billy Austin
Overview. The Active Directory Monitor and Sync app from Breach Secure Now provides visibility into changes made to Microsoft Active Directory user accounts in an on premise Active Directory installa…
Updated 3 months ago by Carl Banzhof
How do I remove/unlink a Microsoft account from a customer?. When I removed a Microsoft account from a customer, there was an error. Did it work?. I was configuring an Office 365 app and got the erro…
Updated 3 months ago by Andrew Hill
Overview The suspicious event log monitor app now supports macOS devices. Since macOS 10.12 Apple has completely redesigned the logging interface on mac and moved away from typical linux style text f…
Basics. Professional Plan Managed Endpoint Detection & Response (EDR). Managed Security Operations Center (SOC) Price. Flat monthly rate per device, firewall, or Office 365 user Flat monthly rate per…
In order to configure Office 365 apps, you will need a valid administrator account for each Microsoft tenant (not one global administrator account that has access to all tenants). If you intend to li…
Microsoft has continually advanced its threat protection of devices with Windows Defender. Since Windows 8 and especially with Windows 10 and later the advanced capabilities to protect the Operating…
This help article describes how to set a specific configuration for a Rocketapp at the device level. As a reminder RocketApps can be configured at the MSP level, the Customer level and at the Device…
This help article describes how to configure Defender Manager to enable Microsoft Defender for a single device. This is useful for evaluating Defender's capabilities on a few machines before rolling…
Overview. The RocketCyber console provides a powerful mechanism to review and act on results from RocketApps. We call this process Triage. Each RocketApp provides an app result or detection whenever…
Big Picture. What. Microsoft has consistently improved their security products over the past few years, but their web portals can be incredibly crowded and irritating to use. Worst of all, the requir…
Two-Factor Authentication (2FA) improves account security by requiring multiple types of authentication. The simplest and most common form of 2FA requires a username/password and an additional one-ti…
Updated 4 months ago by Daniel Westendorf
Some RocketApps allow configuration to your environment's needs. These configurations allow you to specify what threat types to monitor for or exclusions to reduce false positives. To configure a Roc…
Updated 7 months ago by Daniel Westendorf
Microsoft Defender reports health status about its endpoint agent. Defender Manager collects this information and uses it to display the overall health status of a managed Defender device. This artic…
Updated 8 months ago by Carl Banzhof
Microsoft has made big advances with the Windows Defender technology shipped on Windows 10 and Windows Server 2016. One of the more important features is the Attack Surface Reduction Rules or ASR. Ea…
Updated 9 months ago by Carl Banzhof
When The Defender Manager App is enabled, it adds an additional navigation item on the left hand navigation menu. Clicking on Defender Manager from the Nav Menu will take you to the Defender Manager…
Our Spring 2019 Update introduces several new whitelist capabilities. While there are many use cases for excluding detections from the results, the most common we heard from customers was the ability…
Updated 10 months ago by Carl Banzhof
Powered by HelpDocs
