QuestionQ33Verified/Host Management and SetupCopy linkReport a problemAsk AstroTutorSave questionWhich statement is TRUE about disabling detections on a host?AHosts with detections disabled will not alert on anything for 24 hours (by default) or longer if that setting is changedBHosts with detections disabled will not alert on anything until detections are enabled againCHosts with detections disabled will not alert on blocklisted hashes or machine learning detections, but will still alert on IOA-based detections. It will remain that way until detections are enabled againDHosts cannot have their detections disabled individuallyShow AnswerAnswerExplanationDisabling detections for a host prevents detections from that host from alerting until detections are explicitly enabled again; the setting is neither time-limited nor restricted to only selected detection types.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion