You can identify early indicators of compromise by investigating from Warehouse Analytics Reports. You can investigate the suspicious domains and internal hosts activities in the network. For more information see Suspicious Domains and Host Profile sections in How Warehouse Analytics Works.
To investigate, you can do one of the following:
- Use the Investigate option on the main menu.
- Use the Navigate option on the View Job view.
Perform the following steps.
In the main menu, click Reports.
The Manage tab is displayed.
In the Warehouse Analytics toolbar, click View All Jobs.
The View All Jobs tab is displayed..
Double-click the Job execution to view the job details on the View a Job tab. For more information, see View All Jobs Panel
From the Investigate column, click Navigate.
The Investigate a Service dialog box is displayed.
- Select the service, for example Concentrator service.
- Select a data point on the Navigate view.