Detect Threats

The following chapters are intended to give you some ideas on how you can detect threats to your network using cognitix Threat Defender.

Tip

A freshly installed Threat Defender comes with several preset behavior-based correlation scenarios, static network objects, etc. for various use cases that you can enable or adapt to your requirements.

• Deploy cognitix Threat Defender as an IDS at the Network Perimeter
• Detect ARP Spoofing Attacks
• Detect MITRE ATT&CK Techniques
• Time-based Baselining
• Adaptive Behavior-based Graylisting

---

Additional References:

• For information on how to activate IPS rule sets in Threat Defender, see IPS Settings.

• See IPS Rule Definitions on how to create custom IPS rule sets.