Security Center:Changes to Attack Analysis and Event Investigation

Effective date

00:00:00 on September 30, 2025 (UTC+8)

What's changing

Effective September 30, 2025, the following changes apply to the Attack Analysis module in Security Center.

• The Attack Analysis menu will be removed, but Security Center retains its host network defense capabilities. You can view host network defense events in the Network Defense Alert module under Alert > CWPP. This module also lets you view attack payloads and associated CVEs. For more information, see Network Defense Alerts (formerly Attack Analysis).

• The Attack Analysis module will no longer display security events from WAF and VFW. To consolidate security events across products, use the Agentic SOC value-added service.

• The Event Investigation menu will be removed effective September 5, 2025. Its features are now part of the Security Events and Alert modules.