Handling Attacks

Scenario

This section describes how to handle attacks. For attacks reported by other security products, you can handle, disable, or ignore alerts on SecMaster.

• Closing an alert: If an alert has been manually handled, you can close it.
• Ignoring an alert: If the risk of an alert is controllable, you can ignore the alert. The next time this type of alert is triggered, a new alert will be generated.

Handling Attacks

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

5. In the navigation pane on the left, choose Threats > Alerts.
   Figure 2 Alerts
   

6. On the Alerts page, click the Attack tab.
7. In the alert list, locate the row that contains the target alert, click Dispose in the Operation column. The configuration page is displayed on the right.

   You can also go to the details page of the target alert and click Handle in the upper right corner of the page.

8. On the handling configuration page, set attack handling parameters.

   Table 1 Parameter description

   Parameter	Description
   Handling Method	I already handled it: If an alert has been manually handled, you can close it. Ignore: If the risk of an alert is controllable, you can ignore the alert. The next time this type of alert is triggered, a new alert will be generated.
   Batch Handle	Handle the alerts of the same type but that were generated at different times all at once.: Select this option if you want to merge alerts of the same type but that were generated at different times all at once.
   Remarks	Enter the remarks for handling the attack alarm as required.

9. After the configuration is complete, click OK. The Alert handled message is displayed.
10. On the displayed page, click OK.

Related Operations

• View attacks. For details, see Viewing Attack Details.
• Export attacks. For details, see Exporting Attacks.
• For details about the differences between alerts and attacks, see Overview.