Frequently Asked Questions

AWS EC2 Tags

• FAQ: Do I have to use AWS EC2 tags?
• FAQ: Why don’t AWS EC2 tags show up for Configuration Audit?
• FAQ: Why don’t AWS EC2 tags show up for CloudTrail?
• FAQ: How long does it take for new / edited / deleted AWS EC2 tags to show up?
• FAQ: How does Threat Stack apply AWS EC2 tags?
• FAQ: How are AWS EC2 tags ingested by Threat Stack?

Knowledge Base

• Troubleshoot: Upgrade to Agent 1.8.0 on a Debian 9 OS
• Configure Agent Network Access
• How do I Suppress an Alert?
• FAQ: Why was threatstack.service terminated by systemd?
• FAQ: Why isn’t the containerized Agent monitoring audit events on my Azure Kubernetes clusters that have Ubuntu 18 nodes?
• FAQ: Why didn’t the Agent restart on my RedHat (RHEL) 8 or Amazon Linux 2 distribution?

See all 34 articles

File Integrity Monitoring

• Why do I not See FIM alerts on Old CentOS Operating Systems ?
• FAQ: Exceptions for FIM Create, Delete, and Move Events
• File Integrity Monitoring Troubleshooting Suggestions
• FAQ about File Transfer Protocol & FIM

Container Monitoring

• FAQ: Why would I search using TTY?
• FAQ: How do I secure my AWS EKS workload with Threat Stack?
• FAQ: How do I secure my AWS ECS workload with Threat Stack?
• Docker FAQ & Troubleshooting Guide

Vulnerability Assessment

• FAQ: What Vulnerabilities support is offered for Amazon Linux 1 and 2?
• Suppressing Vulnerabilities FAQ
• Vulnerability Assessment FAQ

Configuration Auditing

• Agent Configuration Arguments
• Configuration Auditing Troubleshooting

CloudTrail Alerting

• CloudTrail FAQ & Troubleshooting Guide

Organization Settings

• Threat Stack Cloud Security PlatformⓇ (CSP) Data Collection
• FAQ: Difference Between Organization Owners and Users
• Deploy Key Overview & FAQ
• SSO FAQ & Troubleshooting Guide
• Diagnostic Tools and Support Logs
• Threat Stack Data Collection