Sort Severity Inputs

Place each alert fact in the severity input it most directly informs. Impact Likelihood Exposure Confidence Host stores payroll exports Exploit code is public and referenced in threat reports Service is reachable from the internet Detection rule fired from one low-fidelity string match Account has domain admin privileges Similar activity appeared on three hosts in 20 minutes Asset is behind VPN and network segmentation EDR, proxy, and identity logs all show related behavior

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in