Disposal Center
"Tenant"→"Monitor"→"Security Service"→"Disposal"
Compromised Host
- When the address accessed by the host hits the threat intelligence database, a compromised host record will be generated.
- As long as any entry rule in the threat intelligence database is matched, regardless of whether the rule severity is low, medium, or high, and whether the action is log or block, the host will be marked as compromised and a compromised host record will be generated.
- The threat type generated by the threat intelligence library is: intelligence detection.
Manual Disposal
Manual disposal is used to handle anomalies or threats. Manual disposal policies have higher priority than threat intelligence.

Compromised Hosts View

IoC List View

Threat details
Click Details to view event details
