Real time alerts

When our system detects unusual behavior and malicious attacks, it generates alerts that you can export or visualize in the dashboard. A single attack can generate many alerts; most frequently, we see this occurring with runtime attacks (DLL Injection, method hooking, thread hijacking, etc).

Alerts contain general information about the attack's nature, and a summary of the events that occurred before and after the attack was detected. If you want to know more about the detections, it's best to reach out to support or view the raw logs of the events (enterprise only).