The compromised hosts widget on , aggregates
the
Correlated Events and sorts them by severity. It displays the source IP address/user
who triggered the event, the correlation object that was matched
and the number of times the object was matched. Use the match count
link to jump to the match evidence details.