Configure LogRhythm SIEM NDR AIE Rules

With the NetMon Syslog and API integrations completed, it is recommended to also enable the accompanied AI Engine rule KB module “Network Detection and Response”. This module contains 50+ rules designed specifically to detect abnormal and malicious network activity detected with NetMon.

Refer to the LogRhythm NDR Knowledge Base Module guide for more information, specifically the Network Detection and Response AI Engine Rules.