- What's New
- Function Overview
- Service Overview
- Billing
- Getting Started
-
User Guide
- Buying SecMaster
- Authorizing SecMaster
- Viewing Security Overview
- Workspaces
- Viewing Purchased Resources
- Security Situation
- Resource Manager
- Risk Prevention
- Threat Operations
- Security Orchestration
-
Playbook Overview
- Ransomware Incident Response Solution
- Attack Link Analysis Alert Notification
- HSS Isolation and Killing of Malware
- Automatic Renaming of Alert Names
- Auto High-Risk Vulnerability Notification
- Automatic Notification of High-Risk Alerts
- Auto Blocking for High-risk Alerts
- Real-time Notification of Critical Organization and Management Operations
-
Settings
- Data Integration
-
Log Data Collection
- Data Collection Overview
- Adding a Node
- Configuring a Component
- Adding a Connection
- Creating and Editing a Parser
- Adding and Editing a Collection Channel
- Managing Connections
- Managing Parsers
- Managing Collection Channels
- Viewing Collection Nodes
- Managing Nodes and Components
- Partitioning a Disk
- Logstash Configuration Description
- Connector Rules
- Parser Rules
- Upgrading the Component Controller
- Customizing Directories
- Permissions Management
- Key Operations Recorded by CTS
-
Best Practices
-
Log Access and Transfer Operation Guide
- Solution Overview
- Resource Planning
- Process Flow
-
Procedure
- (Optional) Step 1: Buy an ECS
- (Optional) Step 2: Buy a Data Disk
- (Optional) Step 3: Attach a Data Disk
- Step 4: Create a Non-administrator IAM User
- Step 5: Configure Network Connection
- Step 6: Install the Component Controller (isap-agent)
- Step 7: Install the Log Collection Component (Logstash)
- (Optional) Step 8: Creating a Log Storage Pipeline
- Step 9: Configure a Connector
- (Optional) Step 10: Configure a Log Parser
- Step 11: Configure a Log Collection Channel
- Step 12: Verify Log Access and Transfer
- Credential Leakage Response Solution
-
Log Access and Transfer Operation Guide
-
API Reference
- Before You Start
- API Overview
- Calling APIs
-
API
- Alert Management
- Incident Management
- Indicator Management
- Playbook Management
- Alert Rule Management
- Playbook Version Management
- Playbook Rule Management
- Playbook Instance Management
- Playbook Approval Management
- Playbook Action Management
- Incident Relationship Management
- Data Class Management
- Workflow Management
- Data Space Management
- Pipelines
- Workspace Management
- Metering and Billing
- Metric Query
- Baseline Inspection
- Appendix
- FAQs
Starting an Immediate Baseline Check
Scenarios
To learn about the latest status of the cloud service baseline configurations, execute or let SecMaster execute a check plan. Then you can view which configurations are unsafe in the check results. The baseline inspection supports periodic and immediate checks.
- Periodic check: SecMaster periodically executes the default check plan or the check plans you configure.
- Immediate check: You can start check items in all security standards or a specific check plan anytime.
This topic describes how to start an immediate baseline inspection. You can select the following check types:
- Immediate Check on All Compliance Packs: Check the compliance of all automatic check items in in-use compliance packs.
- Starting a Check Based on a Check Plan: Check the compliance of the check items in the compliance pack configured in a selected check plan.
- Immediate Checks on Certain Check Items: check the selected check items.
Limitations and Constraints
- An immediate check task can be executed only once within 10 minutes.
- A periodic check can be manually started only once within 10 minutes.
Immediate Check on All Compliance Packs
This part describes how to start an immediate check for automatic check items in in-use compliance packs.
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- Click
in the upper left corner of the page and choose Security & Compliance > SecMaster.
- In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
Figure 1 Workspace management page
- In the navigation pane on the left, choose Risk Prevention > Baseline Inspection.
Figure 2 Accessing the check result page
- On the Check Result tab, click Check Now. In the dialog box displayed, click OK.
Refresh the page. To check whether the displayed result is the latest, click View Details in the Operation column and check the time in Latest Check.
Starting a Check Based on a Check Plan
This part describes how to immediately execute a check plan. Once a check plan is kicked off, SecMaster immediately executes each check item included in compliance packs in the check plan.
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- Click
in the upper left corner of the page and choose Security & Compliance > SecMaster.
- In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
Figure 3 Workspace management page
- In the navigation pane on the left, choose Risk Prevention > Baseline Inspection. On the displayed page, click the Security Standards tab. Then, click the Check Plan tab.
- In a check plan box, click Check Now.
SecMaster immediately executes the selected baseline check plan.
Immediate Checks on Certain Check Items
This part describes how to start an immediate check on certain check items.
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- Click
in the upper left corner of the page and choose Security & Compliance > SecMaster.
- In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
Figure 4 Workspace management page
- In the navigation pane on the left, choose Risk Prevention > Baseline Inspection.
Figure 5 Accessing the check result page
- Check one or more check items immediately.
- Check on a single check item
- In the check item list in the lower part of the Check Result tab, locate the target automatic check item and click Check Now in the Operation column.
- In the displayed dialog box, click OK.
Refresh the page and check the details next to Last checked and ensure that the latest scan result is displayed.
- Checks on some check items
- In the check item list in the lower part of the check result tab, select multiple auto check items and click Check Now in the upper left corner above the check item list.
- In the displayed dialog box, click OK.
Refresh the page and check the details next to Last checked and ensure that the latest scan result is displayed.
- Check on a single check item
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.