Attack Scanner only scans indexed events stored in the index repository specified in the Attack Scanner Set Up screen. Moreover, only the events falling within the time range specified by Start time for C&C Callback Scan and End time for C&C Callback Scan, also configurable from the Set Up screen, will be scanned with the latest, downloaded C&C intelligence.
