Incident and Event Management
Use FortiSoC/Incidents & Events to generate, monitor, and manage alerts and events from logs. The live monitoring of security events is a powerful and enabling feature for security operations. Incidents can be created from events to track and respond to suspicious or malicious activities.
|
By default, incidents and events can be managed through the FortiSOC module. See FortiSoC. When the FortiSoC module is disabled, incidents and event management is available through the Incidents & Events module. |