監看中 · 13:53:23 已檢查
警報統計
嚴重程度範圍
0-6 (低)0
7-11 (中)9
12-14 (高)1
15+ (嚴重)0
警報等級
等級 73
等級 83
等級 93
等級 121
警報摘要
總計：發現 10 個警報（等級 ≥ 7）
顯示等級大於或等於 7 的警報
這些警報可能表示潛在的安全問題
僅顯示最近的一萬筆警報資料
警報等級分佈
警報詳情
顯示 0-10 個，共 10 個警報
| 規則 ID | 等級 | 描述 | 位置 | 時間戳 | 詳情 |
|---|---|---|---|---|---|
| 100511 | 9 | Sysmon detected Calculator launched by PowerShell (T1059.001: PowerShell). | EventChannel | 2026/9/3 上午12:32:29 | |
| 550 | 7 | Integrity checksum changed. | syscheck | 2026/9/3 上午12:32:29 | |
| 100521 | 9 | File integrity monitoring detected creation or modification of an HTTP connection status file (T1071.001: Web Protocols). | syscheck | 2026/9/3 上午12:32:29 | |
| 100520 | 9 | File integrity monitoring detected discovery.json creation or modification following user, system, network, and process discovery activity. | syscheck | 2026/9/3 上午12:31:58 | |
| 100519 | 7 | PowerShell queried IPv4 addresses and network interface settings (T1016: System Network Configuration Discovery). | EventChannel | 2026/9/3 上午12:31:57 | |
| 100519 | 7 | PowerShell queried IPv4 addresses and network interface settings (T1016: System Network Configuration Discovery). | EventChannel | 2026/9/3 上午12:31:57 | |
| 100507 | 8 | File integrity monitoring detected a JSON or status file change in a monitored directory. | syscheck | 2026/9/3 上午12:31:39 | |
| 100514 | 12 | External input device activity was followed by a Sysmon-observed PowerShell process on the same host (T1200 to T1059.001). | EventChannel | 2026/9/3 上午12:31:16 | |
| 100501 | 8 | External input device VID_0483/PID_5750 detected (T1200: Hardware Additions). | EventChannel | 2026/9/3 上午12:31:04 | |
| 100501 | 8 | External input device VID_0483/PID_5750 detected (T1200: Hardware Additions). | EventChannel | 2026/9/3 上午12:31:04 |
第 1 頁，共 1 頁