Whitelist Event Detection

  • Base Score: The base score of the whitelist event. Determine the importance of the whitelist event in the system. (Default: 1)
  • Number limit: The maximum whitelist events grabbed for doing the Causal Analysis and Global View (Ranked by the anomaly event score). The higher the number, the more time needed for these processing (Default: 20)