Blocking SSH brute-force attack with active response Restarting the ThreatLockDown agent with active response Disabling a Linux user account with active response