- Attack events
- Manage attack events
Manage attack events
When Contrast reports an attack event, you have the option of configuring a Protect rule to determine how Contrast reacts to the event or adding an application exclusion to suppress the event that you consider to be safe.
Before you begin
Ensure that role-based access control is turned on.
Role-based access control is a preview feature and not available to all customers. Contact your Contrast representative to have role-based access control turned on.
You need a role with the View Attack Data action.
Steps
Select Attack events in the header.
If you are using a grouped view, select an event row. If you are using an individual view, skip this step.
To configure a Protect rule for the event, select the Configure Protect rule icon (
) in the Actions column.Configuring a Protect rule lets you decide whether Contrast should monitor or block the event if it occurs.
To create an application exclusion for the event, select the Configure exclusion icon (
) in the Actions column.Configuring an application exclusion lets you specify whether Contrast should suppress events that you know are safe.
To add the IP address to a denylist, select the Denylist icon (
in the Actions column.