You have selected the event Port Scan from Internal Network in Smart Event, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?
A. Define the two port-scan detections as an exception.
B. Select the two port-scan detections as a new event.
C. Select the two port-scan detections as a sub-event.
D. You cannot set Smart Event to detect two port scans from a host within 10 seconds of each other.
You have selected the event Port Scan from Internal Network in Smart Event, to detect an event when 30 port scans have o
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
You have selected the event Port Scan from Internal Network in Smart Event, to detect an event when 30 port scans have o
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!