The compromised hosts widget on , aggregates the
Correlated Events and sorts them by severity. It displays the source IP
address/user who triggered the event, the correlation object that was matched and the
number of times the object was matched. Use the match count link to jump to the match
evidence details.