Why are Attack Campaigns still active?


During the Attack Campaign lifecycle it can be in one of two states:

  • Active: If one or more detections associated are currently active
  • Closed: If all detections associated with the Campaign are triaged, fixed or inactive.

Campaigns will automatically close due to inactivity after 7 days.

Known limitations

Adding a new triage filter does not retroactively update Active campaigns to closed status even if that filter marks the last detection in the Campaign as fixed. The Campaign will remain active and close automtically after 7 days of inactivity.

Was this article helpful?
1 out of 1 found this helpful

Download PDF


Article is closed for comments.