Exception Data

The Exceptions screen displays all the exceptions you added.

The following table outlines the information available for each exception.

Data

Description

Object

The object value that you added as an exception during alert investigation

Filter

The detection filter that identified the object as a threat indicator

Type

The attribute of the object value you added

Data field

The log field associated with the object value

Match type

The way to add the object value as an exception

  • Exact: Applies exact match of the object value

  • Partial (wildcards): Applies partial match and supports wildcards in the object value

Description

The user-defined information for the exception

Created

The date and time the user added the exception

Created by

The user that added the exception