立即与支持人员聊天
与支持团队交流

Change Auditor Threat Detection 7.0.1 - User Guide

Alerts Status

The Alerts Status pane displays the number of alerts that have been reviewed and the number that have not been reviewed, for the last month and over the last 2 months.

Alerts are marked as reviewed once analysts notes have been added. See How to perform an alert investigation.

Alerts Severity

The Alerts Severity pane graphically displays the number of alerts, by severity level, generated during the last 2 months.

To investigate further
•
Click the portion of the graph on the day that you want to investigate.
This display the ALERTS tab, based on your selection, with the severity and time filter already set. For more information, see Alerts tab

Users tab

The Users tab enables you to use filters to build target lists, to continuously monitor the environment for specific risky behavior patterns.

•
Filters
•
Risk Navigator
•
Users Grid

Filters

You can use alert and indicator filters to only show the users and information that is of interest to you. The Filters pane lists pre-defined filters, with the number of users associated with each in parentheses. Clicking any of these displays all the users that fall into that category. The pre-defined filters are:

•
Risky Users: All users with a risk score greater than 0.
•
Watchlist Users: All users who are currently flagged as “Watched”. See Add a user to the watch profile.
•
Admin Users: All users who have been previously tagged as Admin.
To create a filter
1
Click the filter that you want to modify.
2
Select the desired options from the drop-down list.
3
Click OK.
If required, after creating a filter, you can save it as a favorite, by clicking Save to Favorites
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级