Security Command Center 會分析各種記錄，找出影響網路資源的潛在威脅。如需這些威脅的建議回應，請參閱「回應網路威脅發現結果」。
Event Threat Detection 提供下列以記錄檔為基礎的偵測功能：
-
Active Scan: Log4j Vulnerable to RCE -
Cloud IDS: THREAT_IDENTIFIER -
Command and Control: DNS Tunneling -
Defense Evasion: VPC Route Masquerade Attempt -
Impact: VPC Firewall High Priority Block -
Impact: VPC Firewall Mass Rule Deletion -
Initial Access: Log4j Compromise Attempt -
Log4j Malware: Bad Domain -
Log4j Malware: Bad IP -
Malware: bad domain -
Malware: bad IP -
Malware: Cryptomining Bad Domain -
Malware: Cryptomining Bad IP
後續步驟
- 瞭解 Event Threat Detection。
- 瞭解如何因應網路威脅調查結果。
- 請參閱威脅發現項目索引。