We use Palo Alto Firewalls and get alerts saying "beacon detection" and "malware" connections were detected. What would an enterprise even do with this information other than scan for malware or re-image the laptop?

CORRELATION ALERT

domain: 1

receive_time: 2023/09/11 23:34:50

serial: 012345678910

type: CORRELATION

subtype:

config_ver:

time_generated: 2023/09/11 23:34:50

src: 10.xxx.xxx.xxx

srcuser:

vsys: vsys9

category: compromised-host

severity: medium

dg_hier_level_1: 25

dg_hier_level_2: 41

dg_hier_level_3: 0

dg_hier_level_4: 0

vsys_name: vsys9

device_name: sparkybunsFirewall222

object_name: Beacon Detection

object_id: 6005

evidence: Host visited known malware URL (11 times).