SonicWall Endpoint Security Administration Guide

Viewing Threat Details

To view the Threat Name and detail of the Threats detected and its shows the attack process.

  • Navigate to Account Dashboard > Threats, and click the Threat Name link. The Threats page displays.

    You have an Actions option:

    1. Once you select the the Threat Name link and click the Action to choose the following actions.
      1. Quarantine File

      2. Kill Process

      3. Kill Process Tree

        To execute your actions, click Confirm.

  • This shows the threat execution process, click the threat name to view the details.

  • The admin can find the endpoint and threat details.

  • Admin can view the threat execution details and Mitre Att&ck.

    • Mitre Att&ck:

      Mitre Att&ck is a framework and knowledge base developed by the Mitre Corporation that categorizes and describes the tactics, techniques, and procedures (TTPs) employed by cyber adversaries.

      And we automatically map each detected threat with Mitre Tactics and Techniques. The details can be found on the threats page.

  • Admin can find the detection details.