Aegis
// Administration

Platform settings

Configuration for analysis, retention and alerting. Values are persisted to the database and every change is written to the audit trail.

Retention enforcement

Applies the event retention policy above. Telemetry referenced by an alert or an incident is never deleted regardless of age, because the case it belongs to is the reason it is being kept.

Retention

How long each record type is kept. Applied from the enforcement panel below, never automatically.

days

1 to 3650 days.

days

Usually set to match your compliance obligation.

Alerting

When the platform escalates without waiting for an analyst. Read by the detection engine on every sweep.

risk

Alerts at or above this risk score open a case automatically.

All changes saved