SYNOTI / Active Response
Active Response
Automated response actions and scripts.
Actions / 24h
1,289
6% vs last week
Success Rate
98%
execution
Rolled Back
12
safe-reverted
IPs Blocked
341
last 24h
Avg Execution
1.8s
per action
Response Library
| Script | Type | Actions / 24h | Status |
|---|---|---|---|
| firewall-drop | block | 341 | Active |
| dns-sinkhole | defense | 318 | Active |
| host-deny | block | 212 | Active |
| quarantine-file | contain | 96 | Active |
| restart-service | recover | 128 | Active |
Response Actions / 24h
Success by Script
Recent Activity
View allRansomware behavior blocked on mail-01 CRITICAL
Playbook PB-041 auto-contained host · Ryuk TTPs matched
SSH brute force from 203.0.113.42 HIGH
42 failed logins in 60s · source IP blocked
Threat hunt matched T1059.001 on www-02
PowerShell obfuscation · confidence 0.91
SCA scan completed on 128 hosts
98.2% compliance · 11 benchmarks passed
Firewall rule 'BLK-3321' propagated to 14 nodes
0.4s propagation · geo-blocked 12 CIDRs
Sandbox verdict — 'invoice_9921.exe' malicious
Heuristic score 96 · family 'Emotet'