What information does this report provide
The Threat Watch Audit report provides audit- compliance details for every threat scan generated within a specified period.
How does the report help
You can leverage this report to get the following compliance insights for every threat scan generated.
Threat Scan Date-Time
Scan Type
Number of Infected Resources
Number of Infected Snapshots
Total Number of Infected Files
IOCs Used
Total Number of Files Scanned
IOC Set Matched
With this report, you can proactively get insights into compliance details that helps security teams with auditing.
To access the report
You need to be a Druva Cloud Administrator.
Go to Druva Cloud Platform Console Global Navigation > Reports > Cyber Resilience > Threat Watch Audit Report.
Using the report
📝 Note:
By default, the period selected for the report is 30 days from the current date. For example, if today is March 31, 2024, the report displays data from March 1 to March 30, 2024.
The data in the reports is synced periodically. The report shows the Data last updated details.
The Threat Watch Audit Report comprises the following information:
Field | Description |
Scanned On | The date and time when the scan was performed. |
Scan Type | Type of scan - Incremental or Full Scan |
Files Scanned | Total number of files scanned. |
IOCs Used | The IOCs used for threat scanning. |
Impacted Resources | The total number of the impacted resources. |
Impacted Snapshots | The total number of impacted snapshots. |
Total File Matches | Total number of infected files. |
IOC Sets Matched | Total number of IOCs against which the files were matched. |
Actions
To leverage the report, you can perform the following actions:
Manage Reports: Learn how to subscribe to reports, apply filters, email reports, and edit existing subscriptions.
Custom Report Creation: Learn how to customize, and manage your own reports.
Related Articles
Threat Watch