Security Center:Changes to the Attack Analysis and Event Investigation features

Change time

00:00:00 on September 30, 2025 (UTC+8)

Change details

To continuously improve our services, the Attack Analysis module of Security Center will be updated on September 30, 2025.

• The Attack Analysis menu will be removed. However, Security Center will retain its network defense capabilities. You can continue viewing host network defense events in the Network Defense Alert module under Alert > CWPP. This module provides new features, such as the ability to view attack payloads and associated CVEs. For more information, see Network Defense Alerts (formerly Attack Analysis).

• Security events from Web Application Firewall (WAF) and virtual firewall (VFW) will no longer be displayed in the Attack Analysis module. Use the CTDR value-added service to perform security operations on events from multiple products.

• The Event Investigation menu will be removed on September 5, 2025. The event investigation capabilities are now available in the Security Incident and Alert modules.