Risk Engine & Toxic Combination, Deeper Detection Mechanisms

For every harmful combination that the Risk Engine detects, Security Command Center Enterprise opens a case in the Security Operations panel

Risk Engine computes attack exposure scores for findings and high-value resources, as well as possible attack paths to the high-value resources in your cloud environment, during the simulations

When you mute a toxic combination finding, Security Command Center dismisses the case and removes the finding from default views and queries, but the finding stays alive

Risk Engine will automatically recognize and close the case if the hazardous combination is remedied during the subsequent attack path simulation. Approximately every six hours, simulations run

To match the seriousness of the toxic combination discovery and the related alert in the toxic combination case, toxic combination cases by default have a priority of Critical

Several of the specific security flaws that Risk Engine identifies are also picked up by other Security Command Center detection services, forming a toxic mix

For every harmful combination that the Risk Engine detects, Security Command Center Enterprise opens a case in the Security Operations pane