Yes, you can create a correlation rule logic & fine tine the logic by using the AND operator & 2 Match components.
In one match component, you can specify a filter for the Signature ID so that an event has to be captured using the Signature ID of Event B within the specified period of time using "Time of Day" filter. Here you can specify the Start time & End time.
In the other match component, you can specify filters for the Signature ID of Event A, followed by the Time of Day filter i.e after the time period when Event B was captured.
The AND operator will be used to combine these two match components.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.