The Remote hosts section displays the list of hosts associated with the detected network activity. Click the link with name of a host to expand a block of information about the network activity associated with that host.
The following information is displayed:
Host name—IP address or domain name of the computer with which the corporate LAN computer communicated.
Registrar —Name of the domain registrar that registered this domain.
Domain info —Detailed information on the domain.
Global popularity —Popularity of the domain throughout the world.
Found on the local network —Date and time when the host was detected by Kaspersky Anti Targeted Attack Platform.
Domain activity —Information about domain activity is available if the alert was generated using data from the Endpoint Sensors component. The following information is displayed:
Time —Time when the activity was completed.
Details —Description of the completed operations.
User name —User account used to complete the activity.