Flowmon ADS
- ADS - Bpatterns and Blacklists update intervals
- ADS data processing
- ADS-b5f658
- Detection of Cobalt Strike
- Difference between event detail and event evidence
- Duplicity in method-specific attributes for several methods (submethods)
- Event detail in Japanese is not displayed correctly
- Flowmon ADS - DOS method event trigger calculation
- Flowmon ADS - unpaired flows
- Identification of flow sources reported by ADS SYSCHECK method
- Microsoft (and other) domains detected as a possible botnet C&C domain in ADS - false positive blacklist events
- Multitenancy in ADS
- No data to display in event evidence
- Notifications that warn about ADS not being able to reach out to the services server to update blacklists and BPATTERNs.
- Packet sampling impact on ADS detections
- Unable to update external services
- Yara rules support in ADS