Run retro scans on the historical data captured by existing custom detection models to identify past events that match your defined detection criteria.
![]() |
Important
|
Procedure
- Go to .
- Locate the custom model you want to scan historical data for and click the retro scan
icon (
).
- Select the time range from the drop-down menu.
- Click Run retro scan.Once the retro scan is complete, any matched events generate Workbench alerts according to the configurations of your selected models.