The Security Guardian dashboard displays a visual summary of the current security status of your organization's Active Directory.

 

To access the Security Guardian dashboard:

From the On Demand left navigation menu, choose Security | Dashboard. The dashboard contains tiles for each of the following components:

• Uncertified Tier Zero Objects
• Highest Severity Findings
• Tier Zero Objects Summary
• Active Exposures and Active Compromises
• Configuration Status

The Uncertified Tier Zero Objects tile:

• displays the last time the Tier Zero list was synchronized

• lists the last ten uncertified Tier Zero objects of each type that were added to Security Guardian (you can click View All for an object type to view the complete list)

  NOTE: Tier Zero objects that have been certified are excluded from the list.

• provides links that allow you to

  • view object details (by clicking an object name)

  • NOTE: From within the Details view you can also certify the object. Once a Tier Zero object is certified, it will no longer display in this tile.

  • Investigate the Finding for the object
  • add a new Tier Zero object
  • if BloodHound Enterprise is configured, log into BloodHound (if you have at least Read permissions) to open the Attack Paths page

  • NOTE: If Security Guardian is your Tier Zero provider, this link is hidden.

  • view the Tier Zero Objects list.

The Highest Severity Findings tile displays the top five active Findings of the highest severity. Information includes:

• the Finding name
• when the Finding was Detected
• the Finding Type (Tier Zero, Exposure, or Compromise)
• the Severity indicator (Critical, High, or Medium)
• a link that allows you to Investigate the Finding

The View All link at the bottom of the tile allows you to view the list of all active Findings for the organization.

 

The Tier Zero Objects Summary tile displays a graphical representation of the number of certified vs. uncertified Tier Zero objects.

 

The Active Exposures and Active Compromises tile shows the total number of Indicator of Exposure and Indicator of Compromise Findings in the organization by severity level (Critical, High, and Medium).

 

From the Configuration Status tile you can configure additional components and view existing configurations.