During the Attack Campaign lifecycle it can be in one of two states:
- Active: If one or more detections associated are currently active
- Closed: If all detections associated with the Campaign are triaged, fixed or inactive.
Campaigns will automatically close due to inactivity after 7 days.
Adding a new triage filter does not retroactively update Active campaigns to closed status even if that filter marks the last detection in the Campaign as fixed. The Campaign will remain active and close automtically after 7 days of inactivity.