The execution chain is made of an Attack Vector, which runs the events from inside your network, and targets that receive them: System Targets for events executed at OS level, Cloud Targets for events executed against cloud services. Set them up in order: