检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Example Alarms and Statistics IAM Alarms CTS Alarms DNS Alarms OBS Alarms VPC Alarms
How Do I Use My IAM Account to Grant MTD Permissions to a User of the Account?
The AI detection engine uses an elastic profile model, unsupervised model, and supervised model to detect seven high-risk scenarios of IAM, including risky passwords, credential leakage, token exploitation, abnormal delegation, remote logins, unknown threats, and brute-force cracking
To identify unauthorized malicious activities, MTD must be granted the permissions for accessing the log data of target services, including IAM, DNS, CTS, OBS, and VPC.
The IP address tried to call an API that is typically used to add, modify, or delete IAM users, groups, or policies in your account. Suggestions If this is an expected activity, add the IP address to the whitelist.
The IP address tried to call an API that is typically used to add, modify, or delete IAM users, groups, or policies in your account. Suggestions If this is an expected activity, add the IP address to the whitelist.
Table 1 Detection types Region IAM Detection DNS Detection CTS Detection OBS Detection VPC Detection AP-Bangkok √ - √ √ √ AP-Singapore √ √ √ √ √ LA-MexicoCity - - √ - - CN-Hong Kong √ √ - √ - Parent topic: About the Product
On the displayed page, "No threats have been found in the latest log data of IAM log, OBS log, DNS log, CTS log up to now" disappears. If CTS threat detection is enabled, the tracker is configured successfully. Figure 6 Tracker configured Parent topic: Usage
On the displayed page, "No threats have been found in the latest log data of IAM log, OBS log, DNS log, CTS log up to now" disappears. If CTS threat detection is enabled, the tracker is configured successfully. Figure 6 Tracker configured Parent topic: Process
Table 1 Alarm information Parameter Description Log Type Service logs for which the alarm is generated IAM VPC DNS CTS OBS Alarm Type Multiple types of alarms are supported. For details, see Viewing Alarm Types.
How Do I Use My IAM Account to Grant MTD Permissions to a User of the Account? More Functions Will I Be Charged If I Disable All Log Data Sources After Purchasing MTD? More
MTD can monitor logs of IAM, DNS, CTS, OBS and VPC, all of which are global services in your account.
