Threat Detection: How to run threat detection job

Summary

This article describes how to run threat detection job in Cayosoft Guardian.

Threat detection job uses threat definitions to find security issues in your environment.

A threat alert is raised if a security issue is found.

 

How to run threat detection job

With free license, you can only run threat detection job manually. With a paid license, a threat detection job can also be executed by schedule.

IMPORTANT: Some threat definitions might raise a lot of threat alerts. By default, Cayosoft limits the number of alert that can be raised by a single threat definition. Learn more about how to adjust the maximum number of threat alerts to be raised per definition.

How to run threat detection job manually

1. Open Cayosoft Guardian Web Portal
2. Expand Threat detection node
3. Select Dashboard node
4. In the Threat meter widget, press Run
5. Select Threat alerts node under Threat detection and examine results

How to run threat detection job by schedule

1. Open Cayosoft Guardian Web Portal
2. Expand Threat detection node
3. Select Detection jobs node
4. Select Threat Detection scheduled job and press Properties
5. Change default Schedule if necessary
6. Once job is complete, select Threat alerts node under Threat detection and examine results