Alert on access to malicious site detected by Harmony Endpoint

The automation notifies upon detection of access to malicious sites. The notification includes information on the number of events and number of affected devices. Automation parameters can be set such as the affected devices threshold and total events threshold.

Supported Product

Harmony Endpoint

Parameters

Count events in time duration	Set the duration of time in which to count the events.
Threshold (minimum number of events)	Set the minimum number of events for the automation to be triggered.
Threshold (minimum number of devices)	Set the minimum number of devices affected for the automation to be triggered.
Severity (Minimum)	Set the minimum severity.
Notification profile	Set the notification profile.

Trigger

When a malicious site is detected by Harmony Endpoint.

To view the example of this log, click Run.

Flow