This rule is part of a beta feature. To learn more, contact Support.
bitdefender

Classification:

attack

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Goal

Identify new incidents reported by Bitdefender to detect potential threats.

Strategy

This rule monitors new incidents reported by Bitdefender, allowing security teams to promptly investigate and respond to emerging threats identified by the platform.

Triage and Response

  1. Review the details and severity level of the newly generated incident to assess its potential impact.
  2. Identify the affected endpoints or users involved in the incident for targeted investigation.
  3. Take appropriate remediation actions based on the incident type and severity, such as isolating systems, running scans, or applying patches.
  4. Notify the relevant security teams with incident details and severity classification to coordinate response and mitigation efforts.