The Threats view provides an overview of the triggered and defined alerts in your domain.
When an alert is triggered in your domain, it will be registered here as a threat detected, whereas a defined threat will be the alerts you have defined with their corresponding conditions.
This area contains all the alerts across Devo, from the Alerts view, SecOps, as well as AWS.
Installation process
The Devo 360 for AWS application provides predefined alerts that are installed when installing the application via Devo Exchange.
If these alerts already exist in your domain, the installation will respect the current state and will not replace them with the alerts contained in the application. If these alerts are new, they will be installed, however will be turned “off” until you enable them. Go to the Definitions tab to see how to do this.