Kaspersky Anti Targeted Attack Platform

Configuring Device Activity Detection mode

You can configure the learning mode or enable the monitoring mode for the Device Activity Detection (AM) technology.

To change and configure the mode of the technology:

1. Select the Sensor servers section in the window of the application web interface.
2. Click the card of the relevant component or monitoring point.

   This opens a window with information about the component or monitoring point.

3. If you want to configure the mode of the technology for a Sensor component or a monitoring point, set the Inherit Server technologies toggle switch to Disabled.
4. In the drop-down list to the right of the technology name, select a mode (Learning or Monitoring).
5. After selecting the mode, wait for the changes to be applied. Before the mode is applied, the Changing status is displayed in the drop-down list.
6. If you want to specify the date and time when the technology must switch from learning mode to monitoring mode, click the Set until link and select a date and time. If a date and time has been configured before, the date and time is displayed next to the name of the mode.

The mode of the technology is configured.