Use the Compromised Hosts Widget in the ACC

The compromised hosts widget on ACCThreat Activity, aggregates the Correlated Events and sorts them by severity. It displays the source IP address/user who triggered the event, the correlation object that was matched and the number of times the object was matched. Use the match count link to jump to the match evidence details.
compromised_hosts_ACC.PNG

Related Documentation