I am testing Stealthwatch version 7.1.2 with SLIC, thinking wanted to test the SLIC Tor Entrance / Exit but seam like Cisco Talos not complete database or I testing using wrong way..
Install TOR browser and check if Stealthwatch able to catch me, and it fail to catch me. while the whatismyipaddress.com able to know that is a TOR exit.
Anyone can give me advise?