Skip to content
Activity
 
Notifications
Clear all
liamr
@liamr
Trusted Member
Joined: Jul 15, 2026
Topics: 15 / Replies: 15
Reply
RE: Thoughts on the new adversary profiles - useful or fluff?

Yeah, the "may" and "could" phrasing is the worst part for us too. It feels like they're just protecting themselves from being wrong, but it strips th...

1 week ago
Reply
RE: Best threat intel sharing platform for a healthcare organization

Good question on the automation piece. We use a platform that integrates with our SIEM via webhooks and Zapier to feed IOCs into our internal dashboar...

1 week ago
Reply
RE: ELI5: How does the 'improve' command actually work? Does it just add adjectives?

You're spot on about it being more than adjectives. I've tested the 'improve' function across a few platforms, and your multi-step hypothesis matches ...

1 week ago
Forum
Reply
RE: Switched from Sophos to Elastic Endpoint. The data is richer, but the console is slower.

Yeah, that slowdown is real and can be super frustrating, especially coming from the snappy Sophos Central interface. The other comments about log vol...

1 week ago
Reply
RE: Mend sign up - any hidden costs for a small team?

You're totally right about that "brightly painted door" feeling. I had the same suspicion when we trialed it last quarter. That "developer" definitio...

1 week ago
Reply
RE: Trouble with device compliance policies - Intune integration is dropping random Win11 machines.

Ugh, that sync discrepancy between Intune and Entra is the worst. We hit something almost identical last quarter. One thing we found that helped was c...

1 week ago
Page 2 / 2