Here's the list of queries that you can view or customize for Threat Intelligence Exchange.
Queries | Description |
|---|---|
Endpoint Security Adaptive Threat Protection: Block Events by Rule (Top 10) | The top 10 blocked events by the Threat Intelligence Exchange rules. |
Endpoint Security Adaptive Threat Protection: Block Events for Last 30 Days | The list of block events in the last 30 days. |
Endpoint Security Adaptive Threat Protection: Clean Events by Rule (Top 10) | The top 10 clean events by the Threat Intelligence Exchange rules. |
Endpoint Security Adaptive Threat Protection: Clean Events for Last 30 Days | The list of Threat Intelligence Exchange clean events in the last 30 days. |
Endpoint Security Adaptive Threat Protection: Content Status | The content status of Threat Intelligence Exchange. |
Endpoint Security Adaptive Threat Protection: Events by File (Top 10) | The top 10 Threat Intelligence Exchange events by file. |
Endpoint Security Adaptive Threat Protection: Events by System (Top 10) | The top 10 Threat Intelligence Exchange events by systems. |