The Overview tab provides an initial view into the recent and most important user activities in the environment. Each panel shows either prioritized incidents for investigation or consolidated metrics reflecting potential risks to the enterprise.
What do you want to do?
*You can complete the tasks here.
To access this view, go to INVESTIGATE > Users.
The Overview tab consists of the following panels:
|1||High Risk Users panel|
|2||Top Alerts panel|
All Users panel
|4||Alerts Severity panel|
High Risk Users Panel
The High Risk Users panel lists the top five high-risk user along with the user score.
The following table describes the high risk users panel elements.
Top Alerts Panel
The Top Alerts panel displays a list of alerts for the associated user, severity, alert creation date, and number of indicators. The list consists of the top ten alerts in the last 7 days.
The following table describes the top alerts panel elements.
All Users Panel
The All Users panel displays the number of users in each of the NetWitness UEBA predefined groups.
The following table describes all users panel elements.
Alerts Severity Panel
The Alert Severity panel graphically displays the number of alerts, by severity level generated during the last year.
The following table describes alert severity panel elements.