Manage Signals

The cyberattack radar looks for patterns of suspicious events in the telemetry data sent by user computers. These suspicious patterns are configured in the hunting rules you create in the console or that Cytomic analysts add periodically in Cytomic Orion.

When the cyberattack radar detects a suspicious sequence of events, it generates a signal associated with the computer where it was found and with the hunting rule it used to detect it.

Cytomic Orion enables you to review information about detected signals, assign them to investigations, or remove them automatically or manually to discard false positives.