SOC Dashboard

Selecting SOC from the Dashboards menu displays the SOC Analytics dashboard, which shows key information about your company’s cybersecurity situation from an SOC perspective. Clicking on elements of the dashboard takes you to the relevant details of a particular statistic.

• Entities with Active Detections and No Cases – Displays the number of Suspicious Entities with active Detections (aka not dismissed) that have not been converted to a case.

• Top 5 Active Detections – Lists the five most severe Active Detections for the past 24-hour period.

• Unacknowledged Cases – Indicates the number of cases that have not been assigned and are in the immediate default state after creation.

• Enriched Logs – Indicates the rate of log ingestion and enrichment over the past 24 hours in Maximum EPS, Average EPS, and Events.

• Indicators and Detections Triggered – Indicates the total Indicators and Detections triggered over the past 24 hours.

• Offline Connectors – Displays a count of offline data source connectors, which may prompt a user to click the Administration tab to review detailed information about Connectors.

• Log Ingestion Rates by Source – Displays the number and rate of ingested logs (“Events”) and the EPS Trend, and anomalies may prompt a user to click the Administration tab to review detailed information about Data Sources on the Administration Screen.