The compromised hosts widget on , aggregates
the
Correlated Events and
sorts them by severity. It displays the source IP address/user who
triggered the event, the correlation object that was matched and
the number of times the object was matched. Use the match count
link to jump to the match evidence details.