Investigate and Triage

이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

As Workload Protection evaluates runtime activity, it produces agent events, signals, and findings. Use the Agent Events Explorer to investigate runtime activity, the Signals Explorer to investigate threats, and the Findings Explorer to review runtime security posture issues.

For how each one is produced, see How Workload Protection works.

Agent events

Agent events are the raw telemetry generated by the Datadog Agent when runtime activity matches an agent rule. Use the Agent Events Explorer to investigate this activity.

Signals

Signals are generated when agent events match a backend detection rule. Use the Signals Explorer to investigate threats, triage signals, and take response actions.

Explore Workload Protection signals:


Findings

Findings are generated when agent events match a finding rule. Use the Findings Explorer to review runtime security posture issues.