# Source: https://docs.datadoghq.com/security/default_rules/4ec-343-f90.md

---
title: Signal Sciences flagged an IP
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Datadog Security > OOTB Rules > Signal Sciences flagged an IP
---

# Signal Sciences flagged an IP
 
## Goal{% #goal %}

Detect when an IP is flagged by Signal Sciences.

## Strategy{% #strategy %}

This rule lets you monitor Signal Sciences events submitted through the Signal Sciences [integration](https://app.datadoghq.com/account/settings#integrations/sigsci) to detect when an IP is flagged.

## Triage and response{% #triage-and-response %}

1. Determine whether the attack is a false positive.
1. Determine whether the attack was successful.
1. If the attack exploited a vulnerability in the application, triage the vulnerability.