Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 R2 - LOG MANAGEMENT ADMINISTRATION GUIDE REV 1, Руководство пользователя

Страница: 86 / 246

STRM Users Guide
80 I
NVESTIGATING
O
FFENSES
Hint: If you wish to view an offense in a new window, press CTRL+double-click on
an offense.
Step 3
Double-click the offense you wish to view.
The Offense details panel appears.
Description Specifies the details for the offense.
Attacker/Src Specifies the IP address of the attacker or source of the attack.
Magnitude Specifies the relative importance of the offense. The magnitude
bar provides a visual representation of all the correlated variables
of the offense, attacker, target, or network. Variables include
Relevance, Severity, and Credibility. Point your mouse to the
magnitude bar to display values and the calculated magnitude.
Using the STRM Console Management window, you can
configure the minimum magnitude for offenses you wish to
display. For example, if you configure the Minimum Offense
Magnitude to Display parameter as 4, only offenses with a
magnitude of 4 and above appear in the Offense Manager. For
more information, see the STRM Administration Guide .
Target(s)/Dest Specifies the IP address(es) of local and remote targets.
If the term multiple appears, more than one target is associated
with this offense.
If the term remote appears, this offense includes remote targets.
Attacker Net Specifies the attacker network for this offense.
Target Net Specifies the network on which the offense occurred.
If the term multiple appears, more than one target is associated
with this offense.
Events Specifies the number of events for this offense.
Start Date Specifies the date and time of the event associated with this
offense.
Last Event Specifies the date and time since the last event occurred.
Table 5-2 Viewing Offenses Parameters (continued)
Parameter Description