Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Change Auditor Threat Detection 7.4 - User Guide

Inhaltsnavigation

Introduction to Change Auditor Threat Detection

Overview Which Change Auditor modules are monitored? Threat Detection server events Threat detection concepts

Baselines Threat indicators SMART alerts Risk scoring

Threat Detection process

Using the Threat Detection Dashboard

Deployment and installation Accessing the dashboard Overview tab

High Risk Users SMART Alerts All Users Alerts Status Alerts Severity

Risk Navigator User severity calculation

Alert severity calculation Alert List Alert Filter How to perform an alert investigation

Common functions

Alert and indicator reference

Alert types Threat indicators Our brand, our vision. Together. Contacting Quest Technical support resources

All Users

The All Users pane displays the number of users in each of the Threat Detection predefined groups. The groups are:

•

•

•

See Filters for details on these groups.

To investigate alerts affiliated with a specific group

•

Click the group icon.

This opens the USERS tab with the Tags filter set to the group that you selected. For more information on using the USERS tab, see Users tab.

Alerts Status

The Alerts Status pane displays the number of alerts that have been reviewed and the number that have not been reviewed, for the last month and over the last 2 months.

Alerts are marked as reviewed once analysts notes have been added. See How to perform an alert investigation.

Alerts Severity

The Alerts Severity pane graphically displays the number of alerts, by severity level, generated during the last 2 months.

To investigate further

•

Click the portion of the graph on the day that you want to investigate.

This display the ALERTS tab, based on your selection, with the severity and time filter already set. For more information, see Alerts Tab.

Users tab

The Users tab enables you to use filters to build target lists, to continuously monitor the environment for specific risky behavior patterns.

•

•

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center