Create rerun task

To create a new task, click Tasks > New Task. In the Basics section, type in task information, such as a Name and Note (optional).

Click Continue to configure the task settings.

Rerun settings

•Rerun rule(s) on selected targets—Select the individual or group of computers where you want to rerun the task.

•Rerun evaluate events in time frame—Select the time frame where you want to rerun the task.

•Limit detections to—Limit the number of detections appearing in a rerun task result.

•Add detections to the main detections table immediately—Select the check box to move the result detections to the main Detections tab.

•Ignore exclusions for this task—Select the check box to ignore/exclude detections that match rules picked from the next step in the rerun task creation process.

Rules

Select rules that you want to rerun. Click Add filter, select Rule name and type string to search. Each selected rule will be evaluated in a rerun tasks.

Summary

Review the configured settings summary in Task preview. Verify all the settings and click Create task.