Instead of hacking the system, such as TID 7016555, to make any use of IPv6, Sentinel should not only accept IPv6 syntaxes, but store and parse them in such a way that Alerts, Searches, Correlations, etc can utilise IP Address shorthand (i.e. subnets, etc).

Comments