Mentioned in the guide Meet your Monthly report a Beacon is a periodic communication from your network to systems on the Internet.
The number of beacons mentioned in the report represent new beacons that have been observed. This could include benign beacons originating from expected behavior, as well as suspicious beacons that required investigation or assessment, but represent a new beacon that an analyst investigated in the past week.
These numbers, as well as the rest of the security events listed in the report, represent internal alert events which are analyzed, assessed and most often combined or enriched with other data, but do not warrant an ARO on their own. These events are handled by the team and our suite of analytics and are almost always used alongside additional data sources (endpoint agent, network traffic etc) in a flow that eventually translate into AROs where necessary.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article