Overview
The Risk Scenarios dashboard shows data movement to untrusted locations to highlight important use cases and common risk situations. The dashboard includes a variety of pre-defined scenarios, and you can also easily add your own custom scenarios to increase visibility of the use cases and risks that are most important in your environment.
The Risk Scenarios dashboard
To view the Risk Scenarios dashboard:
- Sign in to the Incydr console as a user with one of the following roles: Customer Cloud Admin, Insider Risk Admin, Insider Risk Analyst, or Insider Risk Read Only.
- Select Dashboards > Risk Scenarios.
| Item | Description | |
|---|---|---|
| a | Date picker |
Click to select the date range for all data displayed on the dashboard. |
| b | Pin favorites |
Click to add the scenario to a Pinned section at the top of the dashboard. This enables you to keep the scenarios you use most at the top of the page. |
| c | View details |
Click to view the Risk scenario details. Details include:
|
| d | Event and user counts |
Displays the count of events and users for the scenario. |
| e | Top destination |
Indicates the destination with the most events. To view all destinations, click the View details |
| f | Scenario details |
Click to show or hide a brief description of the scenario. For custom scenarios, the description is visible in the Saved Search details. |
Risk scenario details
| Item | Description | |
|---|---|---|
| a | View in Forensic Search |
Click to view event details in Forensic Search. |
| b | Filter |
Click to filter results by risk indicator, user attributes, and watchlist membership. |
| c | Export |
Click Export to save an image of the entire dashboard or an individual section. Hover over an area, then click to save an image of the highlighted area. |
| d | Events |
The count of events for this scenario. |
| e | Chart type |
Select the chart type. |
| f | Chart key and filter |
Shows all items in the chart. Deselect any item to remove it from the chart. |
| g | Users |
The count of users included in the scenario. |
| h | Events by destination |
Lists event totals by destination. |
| i | View in Forensic Search |
View event details in Forensic Search for a specific destination. |
| j | View details |
View additional file event details for a specific destination. |
Custom scenarios
You can add any Saved Search to the Risk Scenarios dashboard as a custom scenario. To add a custom scenario:
- If a saved search already exists for your scenario:
- Go to Forensic Search > Saved Searches.
- From the list of saved searches, click the action menu
icon for the search and select Edit details.
The Saved Search details appear.
- Alternatively, to create a new saved search, go to Forensic Search > Search and add the applicable search criteria, then click Save as.
The Saved Search details appear.
- Select Display saved search in Risk Scenarios.
- Choose a field to group results in the risk scenario details.
- Click Save.
The scenario is added to the dashboard.
Comments
Please sign in to leave a comment.