View information about the Threat detection risk factor, which is determined by threat detections on your managed assets.
TrendAI™ correlates known threat detections with asset owners to give you better insight into
possible security risks. The Threat detection risk factor contributes to your attack level.
When viewing risk events, click the number in the case column to view current cases
involving the specified risk event. Click the options icon (
) to open a new case for the risk event or add the case to an existing risk event.
) to open a new case for the risk event or add the case to an existing risk event. |
ImportantFor customers that have updated to the Foundation Services
release, Threat Detections only shows data for devices within the
asset visibility scope of the current user.
|
The following table describes the risk indicators associated with the Threat
detection risk factor.
|
Indicator
|
Description
|
Data sources
|
Target
|
|
Web threats
|
The web reputation score of the URLs the user visited or the
detection of malicious activity within network traffic
|
|
|
|
Email threats
|
Detection of malicious or anomalous email activity
|
|
|
|
Network threats
|
Detection of malicious activity in monitored endpoint
traffic
|
|
|
|
Endpoint threats
|
Detection of events on endpoints that may be malicious
|
|
|
|
Mobile device threats
|
Detection of possible malicious events on mobile
devices
|
|
|
|
Connected app activity
|
Detection of possibly malicious events on Office 365
apps (Teams, SharePoint, OneDrive)
|
|
|
|
Container threats
|
Detection of events in container clusters that might be
malicious
|
|
Container
|