The predefined FortiClient event handlers are updated to include the detection from the newly added logs.
- Go to FortiSoC > Handlers > Event Handler List.
Predefined handlers providing threat detection on FortiClient logs are available. These event handlers are disabled by default.
- Double-click a FortiClient event handler to view filter details.
- In the event handler list, right-click a FortiClient event handler and select Enable. After being enabled, events will be generated by the event handler.