构建查询|Insightidr文件据/title> <link href="//www.gcpym.com/areas/docs/includes/dist/app.css?15f7280702176ccedf1d" rel="stylesheet"> </head> <body> <div id="r7-global-nav"> <div id="react_0HMBM4UUH2ETS"> <header class="r7-nav mobile"> <section class="search-bar search-bar--mobile hide animate-out"> <form action="/search"> <div class="container flex flex-jc-c flex-ai-c"> <div class="search-content flex flex-jc-fs flex-ai-c"> <i class="r7-icon r7-icon-search-magnify"></i> <input type="search" class="search-input" name="q" placeholder="Search"> <input type="submit" class="search-submit button blue" value="搜索"> <input type="hidden" name="filters" value="productname_InsightIDR"> <a id="btnSearchCloseMobile" class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a> </div> </div> </form> </section> <div class="search-overlay search-overlay--mobile overlay "></div> <nav class="main-nav "> <div class="container flex flex-jc-sb flex-ai-c"> <div class="flex flex-jc-c flex-ai-c"> <a class="main-nav__toggle"><i class="r7-icon text-white"></i></a> </div> <a class="main-nav__logo flex flex-jc-c flex-ai-c text-center" href="https://www.rapid7.com/" target="_blank"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7回家"></a> <a class="search flex flex-jc-c flex-ai-c"><i class="r7-icon r7-icon-search-magnify text-white"></i></a> </div> <div class="main-nav__links flex flex-jc-c"> <ul> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/">产品据/a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">了解解决方案据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insightidr.据div class="dropdown-category"> 用户行为分析和SIEM据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightVM据div class="dropdown-category"> 脆弱性管理据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightAppSec据div class="dropdown-category"> 动态应用安全测试据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightconnect/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insightconnect.据div class="dropdown-category"> 管弦乐流与自动化据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightops/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insigrops.据div class="dropdown-category"> 日志管理据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightCloudSec据div class="dropdown-category"> 云安全据/div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">更多的解决方案据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/metasploit/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> metasploit.据div class="dropdown-category"> 渗透测试据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/nexpose/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> nexpose据div class="dropdown-category"> 漏洞管理本地据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/tcell/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 由Rapid7 tCell据div class="dropdown-category"> 应用监控与保护据/div> </div></a></li> </ul> <div class="dropdown-view-all flex flex-jc-sb flex-ai-c"> <a href="https://www.rapid7.com/products/insight-platform/">dota2必威联赛</a> <a href="https://www.rapid7.com/try/insight/" class="button blue">免费试用据/a> </div> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/">服务据/a> <div class="dropdown-content true"> <ul class="dropdown-menu"> <li class="dropdown-title">服务据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-diamond-person.svg')"></div> <div class="dropdown-text"> 管理服务据div class="dropdown-category"> 运营、评估和报告据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-shield.svg')"></div> <div class="dropdown-text"> 安全咨询据div class="dropdown-category"> 评估，测试和响应据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/product-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 产品咨询据div class="dropdown-category"> 快速启动和配置据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/training-certification/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 培训和认证据div class="dropdown-category"> 技能和发展据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/support-and-customer-success/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/user-customer-service-call.svg')"></div> <div class="dropdown-text"> 客户成功据div class="dropdown-category"> 一站式支持中心据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/premium-support/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/premium-support-icon.svg')"></div> <div class="dropdown-text"> 高级支持据div class="dropdown-category"> 优先帮助和更快的解决方案据/div> </div></a></li> </ul> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="">支持与资源据/a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">支持据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-monitor.svg')"></div> <div class="dropdown-text"> 支持门户网站据div class="dropdown-category"> 联系客户支持据/div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-notes.svg')"></div> <div class="dropdown-text"> 产品文档据div class="dropdown-category"> 探索产品指南据/div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/release-notes/" class="has-icon">365必威 </a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/contact/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-envelope-email-checked-okay.svg')"></div> <div class="dropdown-text"> 联系我们据div class="dropdown-category"> 跟销售据/div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">资源据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 基本面据div class="dropdown-category"> 基础安全知识据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/blog/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-signal-wifi.svg')"></div> <div class="dropdown-text"> 博客据div class="dropdown-category"> 最新的行业新闻和安全专业知识据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/resources/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-note-authenticate.svg')"></div> <div class="dropdown-text"> 图书馆资源据div class="dropdown-category"> 电子书，白皮书，视频和简报据/div> </div></a></li> <li class="dropdown-item"><a href="https://extensions.rapid7.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-plug-outlet-collection.svg')"></div> <div class="dropdown-text"> 扩展库据div class="dropdown-category"> 插件，集成和开发者社区据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/partners/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-partners.svg')"></div> <div class="dropdown-text"> 合作伙伴据div class="dropdown-category"> RAPID7合作伙伴生态系统据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-community-users.svg')"></div> <div class="dropdown-text"> 网络广播和活动据div class="dropdown-category"> 即将到来的机会与我们联系据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/db/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-vulnerability.svg')"></div> <div class="dropdown-text"> 漏洞与利用数据库据div class="dropdown-category"> 搜索最新的安全研究必威体育西汉姆联官网据/div> </div></a></li> </ul> </div></li> <li class="main-nav__link "><a class="" href="https://www.rapid7.com/research/">必威体育西汉姆联官网</a></li> <li class="main-nav__link"><a href="https://insight.rapid7.com/saml/SSO" class="has-icon"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/icon-lock.svg"> 登录据/a></li> </ul> </div> </nav> <nav class="sub-nav container flex flex-ai-c"> <div class="sub-nav__title"> <a href="//www.gcpym.com/">文件据/a> </div> <ul> <li class="sub-nav__link dropdown "><a class="dropdown-trigger has-toggle">Insightidr.据/a> <div class="dropdown-content"> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/appspider/">appspider.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight-agent/">必威体育app登录</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightappsec/">2020刀塔必威赛事 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightidr/">Insightidr.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/sensor/">洞察网络传感器据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightops/">Insigrops.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightvm/">InsightVM据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/metasploit/">metasploit.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/nexpose/">nexpose据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/tcell/">TCELL.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/services/">Rapid7服务据/a></li> </ul> </div></li> </ul> </nav> </header> <div class="dropdown-overlay overlay false"></div> <header class="r7-nav"> <nav class="main-nav"> <div class="container flex flex-jc-sb flex-ai-c"> <div class="main-nav__logo"> <a class="flex" href="https://www.rapid7.com/" target="_blank"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7回家"></a> </div> <div class="main-nav__links flex flex-jc-c"> <ul> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/">产品据/a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">了解解决方案据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insightidr.据div class="dropdown-category"> 用户行为分析和SIEM据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightVM据div class="dropdown-category"> 脆弱性管理据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightAppSec据div class="dropdown-category"> 动态应用安全测试据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightconnect/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insightconnect.据div class="dropdown-category"> 管弦乐流与自动化据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightops/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> Insigrops.据div class="dropdown-category"> 日志管理据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightCloudSec据div class="dropdown-category"> 云安全据/div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">更多的解决方案据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/metasploit/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> metasploit.据div class="dropdown-category"> 渗透测试据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/nexpose/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> nexpose据div class="dropdown-category"> 漏洞管理本地据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/tcell/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 由Rapid7 tCell据div class="dropdown-category"> 应用监控与保护据/div> </div></a></li> </ul> <div class="dropdown-view-all flex flex-jc-sb flex-ai-c"> <a href="https://www.rapid7.com/products/insight-platform/">dota2必威联赛</a> <a href="https://www.rapid7.com/try/insight/" class="button blue">免费试用据/a> </div> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/">服务据/a> <div class="dropdown-content true"> <ul class="dropdown-menu"> <li class="dropdown-title">服务据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-diamond-person.svg')"></div> <div class="dropdown-text"> 管理服务据div class="dropdown-category"> 运营、评估和报告据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-shield.svg')"></div> <div class="dropdown-text"> 安全咨询据div class="dropdown-category"> 评估，测试和响应据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/product-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 产品咨询据div class="dropdown-category"> 快速启动和配置据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/training-certification/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 培训和认证据div class="dropdown-category"> 技能和发展据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/support-and-customer-success/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/user-customer-service-call.svg')"></div> <div class="dropdown-text"> 客户成功据div class="dropdown-category"> 一站式支持中心据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/premium-support/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/premium-support-icon.svg')"></div> <div class="dropdown-text"> 高级支持据div class="dropdown-category"> 优先帮助和更快的解决方案据/div> </div></a></li> </ul> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="">支持与资源据/a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">支持据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-monitor.svg')"></div> <div class="dropdown-text"> 支持门户网站据div class="dropdown-category"> 联系客户支持据/div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-notes.svg')"></div> <div class="dropdown-text"> 产品文档据div class="dropdown-category"> 探索产品指南据/div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/release-notes/" class="has-icon">365必威 </a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/contact/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-envelope-email-checked-okay.svg')"></div> <div class="dropdown-text"> 联系我们据div class="dropdown-category"> 跟销售据/div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">资源据/li> <li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 基本面据div class="dropdown-category"> 基础安全知识据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/blog/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-signal-wifi.svg')"></div> <div class="dropdown-text"> 博客据div class="dropdown-category"> 最新的行业新闻和安全专业知识据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/resources/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-note-authenticate.svg')"></div> <div class="dropdown-text"> 图书馆资源据div class="dropdown-category"> 电子书，白皮书，视频和简报据/div> </div></a></li> <li class="dropdown-item"><a href="https://extensions.rapid7.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-plug-outlet-collection.svg')"></div> <div class="dropdown-text"> 扩展库据div class="dropdown-category"> 插件，集成和开发者社区据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/partners/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-partners.svg')"></div> <div class="dropdown-text"> 合作伙伴据div class="dropdown-category"> RAPID7合作伙伴生态系统据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-community-users.svg')"></div> <div class="dropdown-text"> 网络广播和活动据div class="dropdown-category"> 即将到来的机会与我们联系据/div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/db/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-vulnerability.svg')"></div> <div class="dropdown-text"> 漏洞与利用数据库据div class="dropdown-category"> 搜索最新的安全研究必威体育西汉姆联官网据/div> </div></a></li> </ul> </div></li> <li class="main-nav__link "><a class="" href="https://www.rapid7.com/research/">必威体育西汉姆联官网</a></li> </ul> </div> <div class="main-nav__utility"> <ul> <li class="signin"><a href="https://insight.rapid7.com/saml/SSO"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/icon-lock.svg">登录据/a></li> </ul> </div> </div> </nav> <section class="search-bar hide"> <div class="container flex flex-jc-c flex-ai-c"> <form action="/search" class="search-content flex flex-jc-c flex-ai-c"> <i class="r7-icon r7-icon-search-magnify"></i> <input type="search" class="search-input" name="q" placeholder="Search"> <input type="submit" class="search-submit button blue" value="搜索"> <input type="hidden" name="filters" value="productname_InsightIDR"> <a class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a> </form> </div> </section> <div class="search-overlay overlay "></div> <nav class="sub-nav "> <div class="container flex flex-jc-sb"> <a class="logo circle-button" href="https://www.rapid7.com/"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo-short.svg" alt="Rapid7标志"></a> <div class="sub-nav__links flex"> <ul class="flex flex-ai-c"> <li class="sub-nav__title"><a href="//www.gcpym.com/">文件据/a></li> <li class="sub-nav__link dropdown "><a href="#" class="dropdown-trigger has-toggle">Insightidr.据/a> <div class="dropdown-content two-col--sm"> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/appspider/">appspider.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight-agent/">必威体育app登录</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightappsec/">2020刀塔必威赛事 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightidr/">Insightidr.据/a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/sensor/">洞察网络传感器据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightops/">Insigrops.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightvm/">InsightVM据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/metasploit/">metasploit.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/nexpose/">nexpose据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/tcell/">TCELL.据/a></li> <li class="dropdown-item"><a href="//www.gcpym.com/services/">Rapid7服务据/a></li> </ul> <div class="dropdown-view-all"> <a href="//www.gcpym.com/release-notes/">发布说明据/a> </div> </div></li> </ul> </div> <div class="sub-nav__utility"> <a class="search"><i class="r7-icon r7-icon-search-magnify"></i></a> <a class="to-top circle-button"><i class="r7-icon r7-icon-arrow-chevron-up-solid"></i></a> </div> </div> </nav> </header> </div> </div> <div class="sidebar-container" id="product-doc"> <div id="react_0HMBM4UUH2ETR"> <div class="container flex"> <div class="sidebar-content"> <div class="subnav"> <div class="subnav_group"> <h3>欢迎据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insightidr-overview" class=" "><span class="subnav_list-text">Insutigridr概述据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/quick-start-guide" class=" "><span class="subnav_list-text">InsightIDR快速入门指南据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>安装和部署据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/system-requirements" class=" "><span class="subnav_list-text">系统要求据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/set-up-a-service-account" class=" "><span class="subnav_list-text">建立服务帐户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/network-and-environment-audit" class=" "><span class="subnav_list-text">网络和环境审计据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/foundational-event-sources" class=" "><span class="subnav_list-text">基本事件源据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/log-collection-and-storage" class=" "><span class="subnav_list-text">日志数据收集和存储据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/s3-archiving" class=" "><span class="subnav_list-text">S3存档据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/non-admin-domain-controller-account" class=" "><span class="subnav_list-text">非管理域控制器帐户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/read-only-domain-controllers" class=" "><span class="subnav_list-text">只读域控制器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ports-used-by-insightidr" class=" "><span class="subnav_list-text">Insutigridr使用的端口据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/collector-overview" class=" "><span class="subnav_list-text">收藏家概述据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/collector-requirements" class=" "><span class="subnav_list-text">收藏家要求据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/collector-installation-and-deployment" class=" "><span class="subnav_list-text">收集器安装和部署据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/collector-troubleshooting" class=" "><span class="subnav_list-text">收藏家故障排除据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/collector-proxy-configuration" class=" "><span class="subnav_list-text">收集器代理配置据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insight-agent" class=" "><span class="subnav_list-text">必威体育app登录</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/endpoint-monitor" class=" "><span class="subnav_list-text">端点监控据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/configure-the-insight-agent-to-send-logs" class=" "><span class="subnav_list-text">配置Insight代理以发送必威体育app登录其他日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-windows-defender-antivirus" class=" "><span class="subnav_list-text">微软Windows防病毒软件据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/third-party-agents" class=" "><span class="subnav_list-text">第三方代理据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/crowdstrike-falcon-data-replicator" class=" "><span class="subnav_list-text">CrowdStrike猎鹰数据复制器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/other-deployment-options" class=" "><span class="subnav_list-text">其他部署选项据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>自动化据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/get-started-with-automation" class=" "><span class="subnav_list-text">开始自动化据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insight-orchestrator" class=" "><span class="subnav_list-text">洞察力协调器概述据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/configure-connections" class=" "><span class="subnav_list-text">配置自动化连接据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/activate-workflow-templates" class=" "><span class="subnav_list-text">自动化工作流模板据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/automate-workflows" class=" "><span class="subnav_list-text">自动化工作流程据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/kill-a-process" class=" "><span class="subnav_list-text">杀死一个过程据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/suspend-or-disable-a-user" class=" "><span class="subnav_list-text">暂停或禁用用户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/quarantine-an-asset" class=" "><span class="subnav_list-text">隔离资产据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/create-a-ticket" class=" "><span class="subnav_list-text">创建ServiceNow或Jira票据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/automated-enrichment-workflows" class=" "><span class="subnav_list-text">自动丰富工作流程据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/enrich-alert-data-with-open-source-plugins" class=" "><span class="subnav_list-text">使用开源插件丰富警报数据据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/alert-triggers" class=" "><span class="subnav_list-text">警报触发据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/automation-troubleshooting" class=" "><span class="subnav_list-text">自动化故障诊断据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/send-insightconnect-events-to-insightidr" class=" "><span class="subnav_list-text">将InsightConnect事件发送到InsightIdr据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>如何据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/create-and-manage-credentials" class=" "><span class="subnav_list-text">管理凭据据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/search-your-logs" class=" "><span class="subnav_list-text">搜索您的日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/transform-logs-to-universal-event-format" class=" "><span class="subnav_list-text">将日志转换为通用事件格式据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/delete-and-reinstall-a-collector" class=" "><span class="subnav_list-text">删除采集器，重新安装采集器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/deploy-deception-technology" class=" "><span class="subnav_list-text">部署欺骗技术据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/investigate-an-asset-or-user" class=" "><span class="subnav_list-text">调查资产或用户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/integrate-rapid7-products" class=" "><span class="subnav_list-text">集成其他Rapid7产品据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/integrate-metasploit" class=" "><span class="subnav_list-text">集成Metasploit据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/integrate-insightvm" class=" "><span class="subnav_list-text">集成InsightVM据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/manage-event-sources" class=" "><span class="subnav_list-text">管理事件源据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/edit-event-source" class=" "><span class="subnav_list-text">编辑事件源据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/copy-event-sources-to-a-new-collector" class=" "><span class="subnav_list-text">将事件源复制到新收集器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/export-data" class=" "><span class="subnav_list-text">出口数据据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/access-aws-resources-with-ec2-iam-roles" class=" "><span class="subnav_list-text">使用EC2 IAM角色访问AWS资源据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/monitor-your-security-operations-activities" class=" "><span class="subnav_list-text">监控您的安全运营活动据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>最佳实践据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/fim-recommendations" class=" "><span class="subnav_list-text">FIM建议书据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>的概念和用法据span class="subnav_list-toggle minus"></span></h3> <div> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/alerts" class=" "><span class="subnav_list-text">警报据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/create-and-manage-custom-alerts" class=" "><span class="subnav_list-text">创建和管理自定义警报据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/custom-alert-details" class=" "><span class="subnav_list-text">自定义警报详情据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/custom-alerts-and-insight-connect" class=" "><span class="subnav_list-text">自定义警报和InsightConnect据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/detection-rules" class=" "><span class="subnav_list-text">检测规则据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/modify-detection-rules" class=" "><span class="subnav_list-text">修改检测规则据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/detection-library" class=" "><span class="subnav_list-text">检测库据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/assets-on-your-domain" class=" "><span class="subnav_list-text">域名上的资产据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/restrict-or-whitelist-an-asset" class=" "><span class="subnav_list-text">对资产进行限制或设置白名单据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/asset-processes" class=" "><span class="subnav_list-text">资产流程据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/exploitable-vulnerabilities" class=" "><span class="subnav_list-text">可利用的漏洞据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/lateral-movement" class=" "><span class="subnav_list-text">横向运动据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dashboards-and-reports" class=" "><span class="subnav_list-text">仪表板和报告据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/create-and-manage-dashboards" class=" "><span class="subnav_list-text">创建和管理仪表板据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/generate-and-manage-reports" class=" "><span class="subnav_list-text">生成和管理报告据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/add-and-manage-cards" class=" "><span class="subnav_list-text">添加和管理卡片据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/deception-technology" class=" "><span class="subnav_list-text">欺骗技术据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honeypot" class=" "><span class="subnav_list-text">蜜罐据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honey-users" class=" "><span class="subnav_list-text">蜂蜜用户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honey-files" class=" "><span class="subnav_list-text">蜂蜜的文件据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honey-credentials" class=" "><span class="subnav_list-text">蜂蜜凭证据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honey-alerts" class=" "><span class="subnav_list-text">蜂蜜警报据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/troubleshooting-honeypots" class=" "><span class="subnav_list-text">故障排除honeypot据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-honeypots" class=" "><span class="subnav_list-text">AWS honeypot据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/file-access-activity-monitoring" class=" "><span class="subnav_list-text">文件访问活动监控据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/file-integrity-monitoring" class=" "><span class="subnav_list-text">文件完整性监控据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/fim-for-linux" class=" "><span class="subnav_list-text">Linux文件完整性监控据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/search-logs-for-fim-events" class=" "><span class="subnav_list-text">查询FIM事件日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item subnav_list-item--open"><a href="//www.gcpym.com/insightidr/log-search" class=" "><span class="subnav_list-text">日志搜索据/span><span class="subnav_list-toggle minus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/use-visual-search" class=" "><span class="subnav_list-text">使用视觉搜索据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item subnav_list-item--open"><a href="//www.gcpym.com/insightidr/build-a-query" class="active "><span class="subnav_list-text">构建查询据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/use-a-search-language" class=" "><span class="subnav_list-text">使用搜索语言据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/example-queries" class=" "><span class="subnav_list-text">示例查询据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/loose-search" class=" "><span class="subnav_list-text">宽松的搜索据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/automatic-log-structuring" class=" "><span class="subnav_list-text">自动日志结构据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/custom-parsing-tool" class=" "><span class="subnav_list-text">自定义解析工具据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/entry-inspector" class=" "><span class="subnav_list-text">进入检查员据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/enhanced-endpoint-telemetry" class=" "><span class="subnav_list-text">增强终点遥测据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/network-rules" class=" "><span class="subnav_list-text">网络规则据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/network-zones-and-policies" class=" "><span class="subnav_list-text">网络区域与策略据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/owned-and-ignored-domains" class=" "><span class="subnav_list-text">拥有和忽略的域名据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/firewall-rules" class=" "><span class="subnav_list-text">防火墙规则据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ip-addresses" class=" "><span class="subnav_list-text">IP地址据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/network-traffic-analysis" class=" "><span class="subnav_list-text">网络流量分析据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/investigations" class=" "><span class="subnav_list-text">调查据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/create-and-manage-investigations" class=" "><span class="subnav_list-text">创建和管理调查据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/scheduled-forensics" class=" "><span class="subnav_list-text">预定的取证据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/add-data-to-investigations" class=" "><span class="subnav_list-text">将数据添加到调查据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insightidr-rest-api" class=" "><span class="subnav_list-text">Insightidr休息API.据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/get-audit-logs" class=" "><span class="subnav_list-text">平台审核日志API据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/threats" class=" "><span class="subnav_list-text">威胁据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/utilize-existing-threats" class=" "><span class="subnav_list-text">利用现有的威胁据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/add-and-manage-threats" class=" "><span class="subnav_list-text">添加和管理威胁据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/users-and-accounts-on-your-domain" class=" "><span class="subnav_list-text">您的域上的用户和帐户据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/admin-accounts" class=" "><span class="subnav_list-text">管理员帐户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/non-expiring-and-service-accounts" class=" "><span class="subnav_list-text">非到期和服务帐户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/shared-and-linked-accounts" class=" "><span class="subnav_list-text">共享及连结帐户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/watchlist-and-risky-users" class=" "><span class="subnav_list-text">观察列表和危险用户据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/account-tags" class=" "><span class="subnav_list-text">帐户标记据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cold-storage-logs" class=" "><span class="subnav_list-text">冷藏的日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/audit-logging" class=" "><span class="subnav_list-text">审计日志记录据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>检测库据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/detection-library-overview" class=" "><span class="subnav_list-text">概述据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aba-detections" class=" "><span class="subnav_list-text">攻击者行为分析据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/apt-groups" class=" "><span class="subnav_list-text">恰当的组织据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/blackoasis" class=" "><span class="subnav_list-text">黑色子据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/blacktech" class=" "><span class="subnav_list-text">BlackTech据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/blind-eagle" class=" "><span class="subnav_list-text">盲目的鹰据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/bronze-butler" class=" "><span class="subnav_list-text">青铜巴特勒据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/carbanak" class=" "><span class="subnav_list-text">Carbanak据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cobalt-group" class=" "><span class="subnav_list-text">钴集团据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dark-caracal" class=" "><span class="subnav_list-text">黑暗的康拉卡据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/darkhotel" class=" "><span class="subnav_list-text">Darkhotel据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/darkhydrus" class=" "><span class="subnav_list-text">DarkHydrus据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/deep-panda" class=" "><span class="subnav_list-text">深的熊猫据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dragonok" class=" "><span class="subnav_list-text">DragonOK据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dust-storm" class=" "><span class="subnav_list-text">尘暴据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/elderwood" class=" "><span class="subnav_list-text">老年人据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/energetic-bear" class=" "><span class="subnav_list-text">精力充沛的熊据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/fin" class=" "><span class="subnav_list-text">鳍群体据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/gallmaker" class=" "><span class="subnav_list-text">Gallmaker据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/gamaredon-group" class=" "><span class="subnav_list-text">Gamaredon集团据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/gcman" class=" "><span class="subnav_list-text">GCMAN据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/gorgon-group" class=" "><span class="subnav_list-text">戈贡集团据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/group5" class=" "><span class="subnav_list-text">组5据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/group72" class=" "><span class="subnav_list-text">集团72据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/honeybee" class=" "><span class="subnav_list-text">蜜蜂据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/keyboy" class=" "><span class="subnav_list-text">KeyBoy据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/lazarus-group" class=" "><span class="subnav_list-text">拉撒库集团据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/leafminer" class=" "><span class="subnav_list-text">Leafminer据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/lotus-blossom" class=" "><span class="subnav_list-text">莲花盛开据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/machete" class=" "><span class="subnav_list-text">弯刀据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/mofang" class=" "><span class="subnav_list-text">Mofang据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/molerats" class=" "><span class="subnav_list-text">Molerats据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/muddywater" class=" "><span class="subnav_list-text">Muddywater据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/naikon" class=" "><span class="subnav_list-text">纳康据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/neodymium" class=" "><span class="subnav_list-text">钕据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/night-dragon" class=" "><span class="subnav_list-text">夜龙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/orangeworm" class=" "><span class="subnav_list-text">Orangeworm据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/patchwork" class=" "><span class="subnav_list-text">拼接而成据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/platinum" class=" "><span class="subnav_list-text">铂据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/poseidon-group" class=" "><span class="subnav_list-text">波塞冬集团据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/promethium" class=" "><span class="subnav_list-text">临时据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rancor" class=" "><span class="subnav_list-text">冤仇据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rocke" class=" "><span class="subnav_list-text">rocke.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rtm" class=" "><span class="subnav_list-text">RTM据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sandworm-team" class=" "><span class="subnav_list-text">沙虫的团队据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/scadafence-detections" class=" "><span class="subnav_list-text">SCADAfence据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/scarlet-mimic" class=" "><span class="subnav_list-text">鲜红的模仿据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/silverterrier" class=" "><span class="subnav_list-text">SilverTerrier据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/soft-cell" class=" "><span class="subnav_list-text">软细胞据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sowbug" class=" "><span class="subnav_list-text">播索据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/stealth-falcon" class=" "><span class="subnav_list-text">隐形猎鹰据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/stolen-pencil" class=" "><span class="subnav_list-text">偷来的铅笔据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/strider" class=" "><span class="subnav_list-text">水黾据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/suckfly" class=" "><span class="subnav_list-text">Suckfly据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ta459" class=" "><span class="subnav_list-text">TA459.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/taidoor" class=" "><span class="subnav_list-text">Taidoor据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/the-white-company" class=" "><span class="subnav_list-text">白色的公司据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/threat-group-1314" class=" "><span class="subnav_list-text">威胁组-1314据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/thrip" class=" "><span class="subnav_list-text">蓟马据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/turla" class=" "><span class="subnav_list-text">Turla据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/velvet-chollima" class=" "><span class="subnav_list-text">天鹅绒千里马球队据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/whitefly" class=" "><span class="subnav_list-text">粉虱据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/windshift" class=" "><span class="subnav_list-text">Windshift据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/wirte" class=" "><span class="subnav_list-text">写下来据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/wizard-spider" class=" "><span class="subnav_list-text">巫师蜘蛛据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/north-korea-dprk-actor" class=" "><span class="subnav_list-text">朝鲜国家赞助演员据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/windows-suspicious-process" class=" "><span class="subnav_list-text">Windows可疑过程据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>事件源配置据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insightidr-event-sources" class=" "><span class="subnav_list-text">InsightIDR事件源据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/data-collection-methods" class=" "><span class="subnav_list-text">数据收集方法据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/advanced-event-source-settings" class=" "><span class="subnav_list-text">高级事件源设置据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/auto-configure" class=" "><span class="subnav_list-text">汽车配置据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/active-directory" class=" "><span class="subnav_list-text">活动目录据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/active-directory-ad-domain-controller-event-source" class=" "><span class="subnav_list-text">疑难解答Active Directory据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/advanced-malware" class=" "><span class="subnav_list-text">先进的恶意软件据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/fireeye-nx" class=" "><span class="subnav_list-text">FireEye NX据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cloud-service" class=" "><span class="subnav_list-text">云服务据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-cloudtrail-api" class=" "><span class="subnav_list-text">AWS CloudTrail API.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-cloudtrail-sqs" class=" "><span class="subnav_list-text">AWS CloudTrail SQS.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/auth0" class=" "><span class="subnav_list-text">验证据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-office-365" class=" "><span class="subnav_list-text">Microsoft Office 365.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/boxcom" class=" "><span class="subnav_list-text">Box.com据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/duo-security" class=" "><span class="subnav_list-text">两人安全据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/google-apps" class=" "><span class="subnav_list-text">谷歌应用程序据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/google-cloud-platform" class=" "><span class="subnav_list-text">谷歌云平台据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/okta" class=" "><span class="subnav_list-text">okta.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/salesforce" class=" "><span class="subnav_list-text">销售队伍据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/centrify-sso" class=" "><span class="subnav_list-text">Centrify SSO据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/idaptive-sso" class=" "><span class="subnav_list-text">idaptive sso.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/onelogin" class=" "><span class="subnav_list-text">OneLogin据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-azure" class=" "><span class="subnav_list-text">微软Azure.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-amp-for-endpoints" class=" "><span class="subnav_list-text">思科AMP终端据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/mimecast" class=" "><span class="subnav_list-text">mimecast.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/proofpoint-tap" class=" "><span class="subnav_list-text">构建利用据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/zoom-pro" class=" "><span class="subnav_list-text">zoom pro据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/data-exporter" class=" "><span class="subnav_list-text">数据出口商.据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/arcsight-data-exporter" class=" "><span class="subnav_list-text">ArcSight惠普据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/servicenow" class=" "><span class="subnav_list-text">ServiceNOW.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/webhook" class=" "><span class="subnav_list-text">通用Webhook据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/resilient-systems" class=" "><span class="subnav_list-text">弹性系统据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/database-audit-logs" class=" "><span class="subnav_list-text">Microsoft SQL数据库审计日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dhcp" class=" "><span class="subnav_list-text">DHCP据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-dhcp" class=" "><span class="subnav_list-text">微软DHCP据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-ios" class=" "><span class="subnav_list-text">思科IOS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-meraki" class=" "><span class="subnav_list-text">Cisco Meraki.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/infoblox-trinzic" class=" "><span class="subnav_list-text">Infoblox Trinzic据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/isc-dhcpd" class=" "><span class="subnav_list-text">ISC了dhcpd据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dhcp-troubleshooting" class=" "><span class="subnav_list-text">DHCP故障排除据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dns" class=" "><span class="subnav_list-text">DNS.据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-dns" class=" "><span class="subnav_list-text">微软DNS.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-umbrella" class=" "><span class="subnav_list-text">思科伞据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/isc-bind9" class=" "><span class="subnav_list-text">ISC Bind9.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/dns-troubleshooting" class=" "><span class="subnav_list-text">DNS故障排除据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/email-activesync" class=" "><span class="subnav_list-text">电子邮件& ActiveSync据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/owaactivesync" class=" "><span class="subnav_list-text">OWA / ActiveSync据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/firewall" class=" "><span class="subnav_list-text">防火墙据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-utm" class=" "><span class="subnav_list-text">Sophos UTM据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sonicwall-firewall" class=" "><span class="subnav_list-text">Sonicwall防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-asa-firewall-vpn" class=" "><span class="subnav_list-text">思科asa据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/palo-alto-firewall-vpn" class=" "><span class="subnav_list-text">帕洛阿尔托据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/check-point-firewall" class=" "><span class="subnav_list-text">检查点据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/fortinet-firewall" class=" "><span class="subnav_list-text">Fortinet防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/barracuda-firewall" class=" "><span class="subnav_list-text">Barracuda防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/watchguard-xtm" class=" "><span class="subnav_list-text">沃奇卫士XTM据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-xg-firewall" class=" "><span class="subnav_list-text">Sophos XG防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-firepower-threat-defense" class=" "><span class="subnav_list-text">思科火力威胁防御据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/pfsense-firewall" class=" "><span class="subnav_list-text">pfSense防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/juniper-networks-screenos" class=" "><span class="subnav_list-text">瞻博网络ScreenOS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/forcepoint-firewall" class=" "><span class="subnav_list-text">Forcepoint防火墙据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ids" class=" "><span class="subnav_list-text">id据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/mcafee-ids" class=" "><span class="subnav_list-text">McAfee Ids.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/security-onion" class=" "><span class="subnav_list-text">安全洋葱据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/snort" class=" "><span class="subnav_list-text">Snort据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-firepower" class=" "><span class="subnav_list-text">思科火力据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sentinel-ips" class=" "><span class="subnav_list-text">哨兵IPS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/f5-networks-big-ip-local-traffic-manager" class=" "><span class="subnav_list-text">F5网络BIG-IP本地流量管理器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/insight-network-sensor-overview" class=" "><span class="subnav_list-text">网络传感器据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ldap" class=" "><span class="subnav_list-text">LDAP据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ldap-troubleshooting" class=" "><span class="subnav_list-text">LDAP故障排除据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-managed-microsoft-ad" class=" "><span class="subnav_list-text">AWS Managed Microsoft AD据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rapid7-universal-event-sources" class=" "><span class="subnav_list-text">普遍活动来源据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rapid7-universal-dhcp" class=" "><span class="subnav_list-text">Rapid7普遍DHCP据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rapid7-universal-antivirus" class=" "><span class="subnav_list-text">Rapid7 Universal Antivirus.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rapid7-universal-ingress-authentication" class=" "><span class="subnav_list-text">Rapid7 Universal Invress身份验证据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/rapid7-universal-vpn" class=" "><span class="subnav_list-text">Rapid7普遍VPN据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/raw-data" class=" "><span class="subnav_list-text">原始数据据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/generic-windows-event-log" class=" "><span class="subnav_list-text">通用Windows事件日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/custom-logs" class=" "><span class="subnav_list-text">自定义日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/divvycloud" class=" "><span class="subnav_list-text">DivvyCloud据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-sqs" class=" "><span class="subnav_list-text">AWS SQS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/nxlog" class=" "><span class="subnav_list-text">NXLOG.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/generic-syslog" class=" "><span class="subnav_list-text">通用Syslog.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/syslog-logging" class=" "><span class="subnav_list-text">Syslog日志据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/log-aggregators" class=" "><span class="subnav_list-text">日志聚合器据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/logrhythym" class=" "><span class="subnav_list-text">LogRhythm据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/splunk" class=" "><span class="subnav_list-text">Splunk据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/ibm-qradar" class=" "><span class="subnav_list-text">IBM QRadar.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/third-party-alerts" class=" "><span class="subnav_list-text">第三方通知据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/aws-guardduty" class=" "><span class="subnav_list-text">AWS Guardduty.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/carbon-black-edr" class=" "><span class="subnav_list-text">炭黑EDR.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/crowdstrike-falcon-event-source" class=" "><span class="subnav_list-text">Crowdstrike猎鹰据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cyberark-pta-and-epv" class=" "><span class="subnav_list-text">CyberArk库据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cybereason" class=" "><span class="subnav_list-text">Cyber ay.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/darktrace" class=" "><span class="subnav_list-text">DarkTrace据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-defender-atp" class=" "><span class="subnav_list-text">微软后卫ATP据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/netskope" class=" "><span class="subnav_list-text">netskope.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/palo-alto-networks-traps" class=" "><span class="subnav_list-text">帕洛阿尔托网络陷阱ESM据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/varonis-datadvantage" class=" "><span class="subnav_list-text">Varonis Dataptantage.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/vectra-networks" class=" "><span class="subnav_list-text">威达网络据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/scadafence" class=" "><span class="subnav_list-text">SCADAfence据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/virus-scan" class=" "><span class="subnav_list-text">病毒扫描据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/malwarebytes-endpoint-protection" class=" "><span class="subnav_list-text">Malwarebytes端点保护据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/symantec-endpoint-protection" class=" "><span class="subnav_list-text">赛门铁克终点保护据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-av" class=" "><span class="subnav_list-text">Sophos终端用户保护据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cylanceprotect" class=" "><span class="subnav_list-text">CylancePROTECT据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/mcafee-epo" class=" "><span class="subnav_list-text">McAfee促红细胞生成素据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/trend-micro-officescan" class=" "><span class="subnav_list-text">Trend Micro OfficeScan据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-central" class=" "><span class="subnav_list-text">Sophos中央据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-intercept-x" class=" "><span class="subnav_list-text">Sophos拦截X据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/eset-antivirus" class=" "><span class="subnav_list-text">ESET Antivirus.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/kaspersky-anti-virus" class=" "><span class="subnav_list-text">卡巴斯基反病毒据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sentinelone" class=" "><span class="subnav_list-text">SentinelOne端点检测和响应据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/trend-micro-deep-security" class=" "><span class="subnav_list-text">趋势科学深度安全据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/carbon-black-defense" class=" "><span class="subnav_list-text">炭黑防守据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/trend-micro-apex-one" class=" "><span class="subnav_list-text">趋势微顶据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/palo-alto-traps" class=" "><span class="subnav_list-text">帕洛阿尔托陷阱TMS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/vpn" class=" "><span class="subnav_list-text">VPN.据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/citrix-netscaler-vpn" class=" "><span class="subnav_list-text">NetScaler VPN.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/pulse-connect-secure" class=" "><span class="subnav_list-text">脉冲连接安全据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/open-vpn" class=" "><span class="subnav_list-text">OpenVPN据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-acs" class=" "><span class="subnav_list-text">思科ACS据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/cisco-ise" class=" "><span class="subnav_list-text">思科伊势据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-ias-radius" class=" "><span class="subnav_list-text">Microsoft IAS（RADIUS）据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/microsoft-remote-web-access" class=" "><span class="subnav_list-text">Microsoft远程Web访问据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/barracuda-ssl-vpn" class=" "><span class="subnav_list-text">梭鱼SSL VPN据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/web-proxy" class=" "><span class="subnav_list-text">Web代理据/span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/blue-coat-web-proxy" class=" "><span class="subnav_list-text">蓝色外套代理据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/barracuda-web-security-gateway" class=" "><span class="subnav_list-text">Barracuda Web安全网关据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/sophos-secure-web-gateway" class=" "><span class="subnav_list-text">Sophos安全Web网关据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/websense" class=" "><span class="subnav_list-text">Websense据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/zscaler-nss" class=" "><span class="subnav_list-text">Zscaler nss.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/mcafee-web-gateway" class=" "><span class="subnav_list-text">McAfee Web Gateway.据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>政府据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/monthly-data-usage" class=" "><span class="subnav_list-text">月度数据使用据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/browser-settings" class=" "><span class="subnav_list-text">浏览器设置据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/email-alerts" class=" "><span class="subnav_list-text">邮件提醒据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/user-management" class=" "><span class="subnav_list-text">用户管理据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/single-sign-on" class=" "><span class="subnav_list-text">单点登录据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>发布说明据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/release-notes/insightidr/" target="_blank" class=" external"><span class="subnav_list-text">Insightidr发行说明据i class="r7-icon r7-icon-open-new-tab"></i></span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>支持据span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/contact-the-rapid7-support-team" class=" "><span class="subnav_list-text">联系Rapid7支持团队据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/insightidr/share-an-idea" class=" "><span class="subnav_list-text">与Rapid7分享你的想法据/span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> </div> </div> <div class="main-content"> <div class="inner-content"> <div class="html-block"> <h1 id="build-a-query">构建查询据span title="Copy link to clipboard"></span></h1> <p>InsightIdr允许用户搜索其数据的不同方式，包括Regex，String，KeyValue或关键字搜索。本文档将解释在InsightIdr中搜索操作的基础知识。据/p> <div class="api-wrapper"> <div class="api-type basic"> 基本据/div> <h2 id="Log-Entry-Query-Language-LEQL">日志条目查询语言（LEQL）据span title="Copy link to clipboard"></span></h2> </div> <p>我们强大的搜索语言Log Entry Query language (LEQL)允许您构造查询，提取日志中的隐藏数据。据/p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/insightidr/images/2015-05-14_16-26-26.png"></a> <p>LEQL遵循sql风格的语法，构造查询简单而直观。每次搜索都必须以据code class="prism-code language-text"><span class="token-line"><span class="token plain">在()据/span></span></code>声明。然后，您可以插入您的查询据code class="prism-code language-text"><span class="token-line"><span class="token plain">在()据/span></span></code>声明。如果不使用LEQL搜索日志，请使用LEQL查询栏的simple模式。据/p> <div class="api-wrapper"> <div class="api-type basic"> 基本据/div> <h2 id="Simple-Mode">简单模式据span title="Copy link to clipboard"></span></h2> </div> <p>LEQL查询栏有三种模式。简单模式允许您通过使用鼠标选择所需的函数和键来构建查询。据/p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/insightidr/images/Screen Shot 2017-06-02 at 16.12.52.png"></a> <div class="api-wrapper"> <div class="api-type "></div> <h2 id="Advanced-Mode">高级模式据span title="Copy link to clipboard"></span></h2> </div> <p>高级模式允许您使用据a href="//www.gcpym.com/insightidr/use-a-search-language">搜索语言据/a>．有经验的用户可能会更快地发现这种模式，但是语法很严格，您必须记住可用的不同分析函数。据/p> <p>你可以按据strong>钥匙据/strong>当文本框为空时，要查看和加载样本查询。据/p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/insightidr/images/Screen Shot 2017-06-02 at 16.13.28.png"></a> <p>通过单击查询栏左侧的模式切换器，可以在简单模式和高级模式之间进行切换。如果您发现自己处于高级模式，查询无效，系统将阻止您返回简单模式。若要返回简单模式，请删除查询或修复语法错误。据/p> <p>如果您需要帮助编写查询，您可以根据提供的提供重新创建查询据a href="//www.gcpym.com/insightidr/example-queries">示例查询据/a>．据/p> <h1 id="visual-mode">视觉模式据span title="Copy link to clipboard"></span></h1> <p>学习如何使用据a href="//www.gcpym.com/insightidr/use-visual-search">视觉搜索据/a>可视化您的数据。据/p> <div class="api-wrapper"> <div class="api-type "></div> <h2 id="Saved-Searches-and-Queries">已保存的搜索和查询据span title="Copy link to clipboard"></span></h2> </div> <p>如果要返回查询，请使用据strong>保存据/strong>单击查询栏右侧的。据/p> <p>要查看保存的搜索和查询，请选择据strong>疑问据/strong>下拉菜单位于查询栏的左侧。据/p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/insightidr/images/Screen Shot 2018-08-29 at 5.03.26 PM.png"></a> <p>可以根据需要编辑这些搜索，选择据strong>铅笔据/strong>图标，或者您可以使用据strong>垃圾据/strong>图标。据/p> <h2 id="operators">运营商据span title="Copy link to clipboard"></span></h2> <p>您可以使用逻辑操作符和比较操作符来创建更复杂的搜索。下面的指南将介绍在构造查询时可用的两组操作符。据/p> <h3 id="logical-operators">逻辑运算符据span title="Copy link to clipboard"></span></h3> <p>可以使用以下逻辑运算符创建综合搜索条件。请注意，当构造一个搜索查询时，所有操作符都应该是大写的。据/p> <table class="api-table" cellspacing="0"> <thead> <tr> <th><p>逻辑运营商据/p></th> <th><p>例子据/p></th> <th><p>描述据/p></th> </tr> </thead> <tbody> <tr> <td><p>“和”据/p></td> <td><p>expr1和expr2据/p></td> <td><p>返回与两个条件匹配的日志事件据/p></td> </tr> <tr> <td><p>”或“据/p></td> <td><p>expr1或expr2据/p></td> <td><p>返回符合一个或两个条件的日志事件据/p></td> </tr> <tr> <td><p>“不是”据/p></td> <td><p>Expr1不是Expr2.据/p></td> <td><p>返回与Expr1匹配但不是Expr2的日志事件据/p></td> </tr> <tr> <td></td> <td></td> <td></td> </tr> </tbody> </table> <h3 id="comparison-operators">比较运算符据span title="Copy link to clipboard"></span></h3> <p>比较运算符可以用于KVP搜索和正则表达式搜索。据/p> <table class="api-table" cellspacing="0"> <thead> <tr> <th><p>比较运算符据/p></th> <th><p>例子据/p></th> <th><p>描述据/p></th> </tr> </thead> <tbody> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">＝＝据/span></span></code></p></td> <td><p>凯亚•= = KeyB据/p></td> <td><p>返回键值相同的日志事件。使用此操作员比较键。您可以比较字符串或数字值。据/p></td> </tr> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">= = !据/span></span></code></p></td> <td><p>keya！==键据/p></td> <td><p>返回键值不相同的日志事件。您可以输入字符串或数值。据/p></td> </tr> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">=据/span></span></code></p></td> <td><p>keya = 3.据/p></td> <td><p>返回键等于特定值的日志事件。使用这个来比较键。您可以输入数字或字符串值。据/p></td> </tr> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">据据/span></span></code></p></td> <td><p>凯亚•据keyb or="" keya=""> 3.据/keyb></p></td> <td><p>返回小于指定值的日志事件。您可以输入数值或密钥。据/p></td> </tr> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">＜=据/span></span></code></p></td> <td><p>凯亚•< = KeyB或KeyA < = 3据/p></td> <td><p>返回小于或等于指定值的日志事件。您可以输入数值或键。据/p></td> </tr> <tr> <td><p><code class="prism-code language-text"><span class="token-line"><span class="token plain">>据/span></span></code></p></td> <td><p>凯亚•> KeyB或KeyA > 3据/p></td> <td><p>返回大于指定值的日志事件。您可以输入数值或键。据/p></td> </tr> </tbody> </table> <div class="block-callout info"> <h3>格式的数值据span title="Copy link to clipboard"></span></h3> <p>数值必须格式化为整数、浮点值或科学记数法才能正确识别。单元不作为比较的一部分计算。例如，搜索值<100bytes将不会返回值=200bits的结果。据/p> </div> </div> <div class="feedback "> <div class="feedback__title"> 这个页面对你有帮助吗?据/div> <button class="feedback__yes flex flex-ai-c"><img src="//www.gcpym.com/Areas/Docs/includes/img/icon-thumbs-up.svg">是的据/button> <button class="feedback__no flex flex-ai-c"><img src="//www.gcpym.com/Areas/Docs/includes/img/icon-thumbs-up.svg">没有据/button> </div> <div class="postnav"> <a href="//www.gcpym.com/insightidr/use-visual-search" class="postnav__link prev"> <div class="postnav__icon"> <i class="r7-icon r7-icon-arrow-chevron-right"></i> </div> <div class="postnav__text"> <div class="postnav__parent"> 的概念和用法据/div> <div class="postnav__post"> 使用视觉搜索据/div> </div></a> <a href="//www.gcpym.com/insightidr/use-a-search-language" class="postnav__link next"> <div class="postnav__text"> <div class="postnav__parent"> 的概念和用法据/div> <div class="postnav__post"> 使用搜索语言据/div> </div> <div class="postnav__icon"> <i class="r7-icon r7-icon-arrow-chevron-right"></i> </div></a> </div> </div> </div> </div> <div class="postnav-border"></div> </div> </div> <footer class="footer"> <div class="container wrapper"> <section class="footer__links"> <div class="footer__links-wrapper"> <div class="footer__links-col"> <div class="footer__links-section footer__contact"> <a href="https://www.rapid7.com"><img alt="Rapid7标志" class="logo" data-src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg"></a> <div class="footer__links-title"> 客户支持据/div> <a class="link" href="tel:1-866-390-8113">+ 1-866-390-8113(免费)据/a> <div class="footer__links-title"> 销售支持据/div> <a class="link" href="tel:866-772-7437">+ 1-866-772-7437(免费)据/a> <div class="footer__breach"> <div class="footer__breach-title"> 需要立即帮助解决一个缺口?据/div> <div class="footer__breach-contact"> <div class="footer__breach-icon"></div> <div class="footer__breach-phone"> <a href="tel:18447274347">+ 1-844-727-4347据/a> </div> </div> </div> </div> <div class="footer__links-section footer__solutions"> <div class="footer__links-title"> 解决方案据/div> <a class="link" href="https://www.rapid7.com/solutions">所有解决方案据/a> <a class="link" href="https://www.rapid7.com/solutions/industry">行业解决方案据/a> <a class="link" href="https://www.rapid7.com/solutions/compliance/">遵从性解决方案据/a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__support"> <div class="footer__links-title"> 支持和资源据/div> <a class="link" href="https://www.rapid7.com/for-customers">产品支持据/a> <a class="link" href="https://www.rapid7.com/resources">图书馆资源据/a> <a class="link" href="https://www.rapid7.com/about/customers">客户故事据/a> <a class="link" href="https://www.rapid7.com/about/events-webcasts">事件和网络广播据/a> <a class="link" href="https://www.rapid7.com/services/training-certification">培训和认证据/a> <a class="link" href="https://www.rapid7.com/fundamentals">IT与安全基础知识据/a> <a class="link" href="https://www.rapid7.com/db">漏洞与利用数据库据/a> </div> <div class="footer__links-section footer__about"> <div class="footer__links-title"> 关于我们据/div> <a class="link" href="https://www.rapid7.com/about/company">公司据/a> <a class="link" href="https://www.rapid7.com/about/leadership">领导据/a> <a class="link" href="https://www.rapid7.com/about/social-good/">社会美好据/a> <a class="link" href="https://www.rapid7.com/about/news">新闻和新闻稿据/a> <a class="link" href="https://www.rapid7.com/about/customers">客户据/a> <a class="link" href="https://www.rapid7.com/about/public-policy">公共政策据/a> <a class="link" href="https://www.rapid7.com/open-source/">开源据/a> <a class="link" href="https://investors.rapid7.com/">投资者据/a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__connect"> <div class="footer__links-title"> 联系我们据/div> <a class="link" href="https://www.rapid7.com/contact">联系据/a> <a class="link" href="https://blog.rapid7.com/">博客据/a> <a class="link" href="https://support.rapid7.com/">支持登录据/a> <a class="link" href="https://www.rapid7.com/careers">职业生涯据/a> <div class="footer__links-social"> <a class="linkedin" href="https://www.linkedin.com/company/39624" target="_blank"></a> <a class="twitter" href="https://twitter.com/Rapid7" target="_blank"></a> <a class="facebook" href="https://www.facebook.com/rapid7" target="_blank"></a> <a class="instagram" href="https://www.instagram.com/rapid7/" target="_blank"></a> </div> </div> </div> </div> </section> </div> <section class="footer__legal"> <div class="container wrapper"> <div class="footer__legal-copyright"> 必威靠谱 </div> <div class="footer__legal-link"> <a href="https://www.rapid7.com/legal">法律术语据/a> </div>|据div class="footer__legal-link"> <a href="https://www.rapid7.com/privacy-policy">隐私政策据/a> </div>|据div class="footer__legal-link"> <a href="https://www.rapid7.com/export-notice">出口通知据/a> </div>|据div class="footer__legal-link"> <a href="https://www.rapid7.com/trust">信任据/a> </div> </div> </section> </footer> <div id="react_0HMBM4UUH2ETT"></div>  <noscript> <iframe src="https://www.gcpym.com/ns.html?id=GTM-WBTPTVC" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>  <div style="text-align:center;margin-bottom:5px;"><form action="http://www.baidu.com/baidu" target="_blank"><div bgcolor="#FFFFFF" style="text-align:center;"><input name="tn" type="hidden" value="baidu"><a href="http://www.baidu.com/"><img src="http://img.baidu.com/img/logo-80px.gif" width="80px" height="29px" alt="Baidu" align="bottom" border="0"></a><input type="text" name="word" size="30" placeholder="" value=""><input type="submit" value="百度搜索"></div></form></div><div id="so360" style="text-align:center;margin-bottom:5px;"><form action="https://www.so.com/" target="_blank" id="so360form"><img src="http://p1.qhimg.com/d/_onebox/search.png" width="100px" height="25px"> <input type="text" autocomplete="off" name="q" id="so360_keyword" placeholder="" value=""> <input type="submit" id="so360_submit" value="360搜索"> <input type="hidden" name="ie" value="gbk"><input type="hidden" name="src" value="zz"> <input type="hidden" name="site" value="so.com"> <input type="hidden" name="rg" value="1"></form></div><div id="sogou" style="text-align:center;margin-bottom:5px;"><form action="https://www.sogou.com/" target="_blank" id="so360form"><img src="https://www.sogou.com/web/index/images/logo_440x140.v.4.png" width="100px" height="25px"> <input type="text" autocomplete="off" name="q" id="sogou.com_keyword" placeholder="" value=""> <input type="submit" id="sogou_submit" value="搜狗"> <input type="hidden" name="ie" value="gbk"><input type="hidden" name="src" value="zz"> <input type="hidden" name="site" value="so.com"> <input type="hidden" name="rg" value="1"></form></div></body> </html>