Deploy Recommended Detections

In addition to the detections that will be deployed automatically in your Anvilogic trial environment, you can manually deploy recommended detections. Note that the detections with the highest recommends will be deployed for you automatically, but the process outlined in the video will walk you through a manual workflow, which many organizations will prefer. The general steps are:

• Find recommended detections on the home page, armory, or from MITRE ATT&CK coverage matrix that you want to deploy

• Create your own copy of it by adding it to your workspace

• View the task (redirect automatically or from Tasks)

• Make any desired edits

• Deploy into your data repository

Also note that in some free trial environments, you will not be able to deploy Threat Scenarios. This is a known limitation of some free trial environments, but will not be a limitation of any production deployment. If you would like to test Threat Scenarios in the free trial and are unable to do so, reach out to [e-mail] for assistance.