Skip to Content

Malicious Communication Detection

Table 1. Malicious Communication Detection List Parameters

ParameterDescription
Resource AddressThe IP address of the host. If there is no external IP, the internal IP or cloud resource ID is displayed.
Threat TypeDescribes the type of threat received.
Risk LevelThe risk level of the current event, classified as: High, Medium, or Low.
Process IDThe PID of the process involved in the threat communication.
Process PathThe path of the process involved in the threat communication.
Communication Target AddressThe destination IP address of the threat communication.
Handling AdviceProvides suggested solutions for the risk.
Discovery TimeThe first time the security risk was discovered.
Update TimeThe last time the security risk was discovered.
Handling StatusIndicates the status of handling, including “Not Handled” and “Ignored.” If the risk has been handled, it will be deleted in the next detection.

Malicious Communication Details

Displays the description of the malicious communication and advice on how to handle it.