Dynamic Prevention is a security engine that learns behavioral patterns to proactively stop attacks. By automatically applying security rules, Dynamic Prevention reduces the attack surface and prevents threats before they impact your environment. For more information, see What is Dynamic Prevention?. For each threat category, you can define the automatic action: Block or Monitor and how each action is tracked. These threat categories represent different stages of the attack lifecycle, such as lateral movement or command and control. You can view the enforced rules and the threats they prevent in the Threats Dashboard.
By default, for each Threat Category, the Action is set to Block and the tracking is set to create an event. To meet your security requirements, you can change these configurations.
You can monitor the rules that have been applied and the threats that have been prevented from the Threats Dashboard. For more information, see Using the Security Threats Dashboard.
Dynamic Prevention produces two events:
-
When an adaptive rule is applied
-
When a malicious action is taken
0 comments
Article is closed for comments.