| Field | Operator | Value |
|---|---|---|
Threat List |
is not empty | |
Agent Enabled (True/False) |
== | False |
Last Time Seen |
older than | 14 days |
LDG fields used:
Threat ListAgent Enabled (True/False)Last Time SeenSupporting endpoints:
_web_api_threats_get_web_api_threats_mitigate_{action}_post