FortiClient event handler update
The predefined FortiClient event handlers are updated to include the detection from the newly added logs.
To view the updated FortiClient event handlers:
- Go to FortiSoC > Handlers > Event Handler List.
Predefined handlers providing threat detection on FortiClient logs are available. These event handlers are disabled by default. - Double-click a FortiClient event handler to view filter details.
- In the event handler list, right-click a FortiClient event handler and select Enable. After being enabled, events will be generated by the event handler.