網路威脅發現項目

Security Command Center 會分析各種記錄，找出影響網路資源的潛在威脅。如需這些威脅的建議回應，請參閱「回應網路威脅發現結果」。

Event Threat Detection 提供下列以記錄為基礎的偵測功能：

  • Active Scan: Log4j Vulnerable to RCE
  • Cloud IDS: THREAT_IDENTIFIER
  • Command and Control: DNS Tunneling
  • Defense Evasion: VPC Route Masquerade Attempt
  • Impact: VPC Firewall High Priority Block
  • Impact: VPC Firewall Mass Rule Deletion
  • Initial Access: Log4j Compromise Attempt
  • Log4j Malware: Bad Domain
  • Log4j Malware: Bad IP
  • Malware: bad domain
  • Malware: bad IP
  • Malware: Cryptomining Bad Domain
  • Malware: Cryptomining Bad IP

    • 後續步驟