Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Detection specific guidance

Detection-specific guidance for interpreting selected Vectra detections, behaviors, and investigation context.

Suspicious Remote DesktopHidden HTTPS Tunnel - detection showing proxy IP as targetData Gathering - detected between Brain and SensorSuspect Protocol Activity detection descriptionsTurla and Snake malwareSuspicious Remote ExecutionIntel AMT (Active Management Technology) detections
PreviousRecall host dashboardNextSuspicious Remote Desktop

Last updated

Was this helpful?