Looking up IoC scan usage
-
Select the Security > Resources menu.
-
In the left panel, click on the resource for which you want to view usage.
-
Deploy the Usage of resource area, which provides the following information:
-
Agent groups - Scheduled scan: agent groups that were analyzed during a scheduled IoC scan for this resource.
-
Rule sets - Action when logs are generated: rule sets that triggered the IoC scan. Click on the name of the rule set to open the corresponding panel.
-
Tasks: Tasks relating to Yara IoC scans executed on demand. Click on the name of the task to open the corresponding panel.
-