Looking up IoC scan usage

  1. Select the Security > Resources menu.

  2. In the left panel, click on the resource for which you want to view usage.

  3. Deploy the Usage of resource area, which provides the following information:

    • Agent groups - Scheduled scan: agent groups that were analyzed during a scheduled IoC scan for this resource.

    • Rule sets - Action when logs are generated: rule sets that triggered the IoC scan. Click on the name of the rule set to open the corresponding panel.

    • Tasks: Tasks relating to Yara IoC scans executed on demand. Click on the name of the task to open the corresponding panel.