Updated on 2022-08-11 GMT+08:00

Basic Concepts

Detector

A detector is a region entity created once MTD is enabled in a region. All threat detection results in the region are associated with the detector.

Data Source

Data source refers to the logs of services. These logs are detected and analyzed by MTD to identify the potential threats. To identify unauthorized malicious activities, MTD must be granted the permissions for accessing the log data of target services, including IAM, DNS, CTS, OBS, and VPC.